CVE-2026-107168 — M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars()
A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loo…
Published: 2026-10-07 · CVSS: 6.2 · CVSS 3.1
A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. This issue leads to sustained high CPU utilization, resulting in a Denial of Service (DoS) for the affected application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7