CVE-2023-0341

Name of the Vulnerable Software and Affected Versions editorconfig-core-c versions prior to 0.12.6

Description A stack buffer overflow exists in the ec glob function, allowing an attacker to arbitrarily write to the stack and possibly enabling remote code execution. This issue is resolved in version 0.12.6 by implementing bound checking for all write operations over the p pcre buffer.

Recommendations For versions prior to 0.12.6, update to version 0.12.6 to resolve the issue by implementing bound checking for all write operations over the p pcre buffer. As a temporary workaround, consider restricting the use of the ec glob function until a patch is available.