CVE-2025-71450

Name of the Vulnerable Software and Affected Versions inih versions prior to r63

Description A one-byte stack buffer under-read exists in the ini parse stream() function within the ini.c file. This occurs when an attacker provides an INI file or string containing a line of at least INI MAX LINE-1 bytes followed by an embedded NUL byte, allowing the reading of abyss[-1] and resulting in undefined behavior.

Recommendations Update to version r63 or later.