A flaw was found in libfyaml. When processing a specially crafted YAML document, a remote attacker can trigger a stack exhaustion vulnerability in the `fy_atom_iter_format()` function. This occurs because the function repeatedly allocates memory on the stack without releasing it, leading to cumulative stack growth. This can cause the process to crash, resulting in a denial of service.
Last checked: 2026-09-25 18:57 UTC
Proof of concept · CISA Coordinator (Assessed 2026-09-25 16:18 UTC)
Fix evidence last checked: 2026-09-24 18:26 UTC