CVE-2026-88359

Name of the Vulnerable Software and Affected Versions libfyaml version 0.9.6

Description A stack exhaustion issue exists in the fy atom iter format() function. When the software processes a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca() inside a loop. Because the allocated stack memory is not released until the function returns, the cumulative growth can exceed the process stack limit, leading to a SIGSEGV (segmentation fault) and a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.