CVE-2026-108063

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of Service (DoS).

Score

CVSS 3.1 5.5 Medium

Status

Awaiting Analysis - secalert@redhat.com

Published

2026-10-09

Last modified

2026-10-09

Weaknesses

CWE-476

Affected products

• Enterprise Linux (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2026-108063
• https://github.com/libhangul/libhangul/blob/5094421d9586294b2aad09924b9a54e2e6060f06/hangul/hanja.c
• https://github.com/libhangul/libhangul/issues/106