Yunseong Kim c8dc986a39 libyang: Fix CVE-2026-41401 and CVE-2026-44673 ...

CVE-2026-41401:

  Fix incorrect metadata list pointer update in lyd_parse_set_data_flags()
  when freeing the head metadata entry. Without this fix, crafted YANG XML
  documents with specific metadata ordering can trigger invalid pointer
  states in the metadata linked list.

CVE-2026-44673:

  Fix integer overflow and OOM in the LYB binary parser. lyb_read_string()
  wraps len + 1 to 0 when len == UINT64_MAX, and lyb_read_term_value()
  truncates uint64_t to uint32_t causing undersized allocation. Both paths
  are reachable via malformed LYB input with crafted length fields.

Signed-off-by: Yunseong Kim <yunseong.kim@est.tech>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

2026-07-16 15:49:42 +05:30

..

libyang

libyang: Fix CVE-2026-41401 and CVE-2026-44673

2026-07-16 15:49:42 +05:30

libyang_2.1.148.bb

libyang: Fix CVE-2026-41401 and CVE-2026-44673

2026-07-16 15:49:42 +05:30