CVE-2026-36189
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A buffer overflow vulnerability in Uncrustify (version v.Uncrustify_d-0.82.0-132-bcc41cbdc) exists in the check_template function, tokenize_cleanup function, and check_template.cpp file. A local attacker can cause a denial of service.
Risk Assessment
An attacker with local access can crash the tool, disrupting code formatting processes and potentially affecting system stability.
Recommendation
Update Uncrustify to a version containing commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc or later.
Original NVD description (English source)
Buffer Overflow vulnerability in Uncrustify Project Affected v.Uncrustify_d-0.82.0-132-bcc41cbdc and Fixed in commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc allows a local attacker to cause a denial of service via the check_template.cpp, check_template function, tokenize_cleanup function, uncrustify executable components