CVE-2026-107170— M17n-lib: null dereference in minput_open_im() after failed m17n_init()
Quick assessment
Affected
Red Hat Red Hat Enterprise Linux 10
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 m17n-lib 中发现了一个缺陷。在库初始化期间，如果发生部分失败，可能会导致内部驱动程序指针未被初始化。在特定的错误条件下（例如系统资源耗尽或数据库损坏），当应用程序尝试打开输入法时，会解引用这个空指针，而未进行适当的验证。此问题会导致应用程序崩溃，从而造成拒绝服务（DoS）攻击。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-107170
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
M17n-lib: null dereference in minput_open_im() after failed m17n_init()
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system resource exhaustion or database corruption, an application attempting to open an input method dereferences this null pointer without proper validation. This issue causes the application to crash, resulting in a Denial of Service (DoS).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
II. Public POCs for CVE-2026-107170
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-107170
请登录查看更多情报信息。
Other References for CVE-2026-107170 (2)
Same Patch Batch · Red Hat · 2026-10-07 · 13 CVEs total
| CVE-2026-106471 | 8.1 HIGH | Candlepin: candlepin: broken object-level authorization via verifyauthorizationfilter mult |
| CVE-2026-107121 | 6.5 MEDIUM | Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downg |
| CVE-2026-103869 | 6.5 MEDIUM | Pulp-ansible: bearer tokens are reused across remotes in a worker |
| CVE-2026-103868 | 6.5 MEDIUM | Pulp-container: registry credentials are reused across remotes in a worker |
| CVE-2026-107174 | 6.4 MEDIUM | Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extr |
| CVE-2026-106064 | 6.3 MEDIUM | Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions |
| CVE-2026-107169 | 6.2 MEDIUM | M17n-lib: null-pointer write in read_mtext_element() on malformed utf-8 |
| CVE-2026-107167 | 6.2 MEDIUM | M17n-lib: heap use-after-free write in re_init_ic() |
| CVE-2026-107168 | 6.2 MEDIUM | M17n-lib: parser infinite loop on malformed utf-8 in count_utf_8_chars() |
| CVE-2026-107151 | 5.9 MEDIUM | Rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated request |
| CVE-2026-106061 | 5.5 MEDIUM | Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file |
| CVE-2026-103870 | 5.0 MEDIUM | Pulp-rpm: distribution tree publish creates directories from .treeinfo ids |
IV. Related Vulnerabilities
Same product: Red Hat Enterprise Linux 10
-
CVE-2026-107169
M17n-lib: null-pointer write in read_mtext_element() on malf -
CVE-2026-107167
M17n-lib: heap use-after-free write in re_init_ic() -
CVE-2026-106064
Gimp: gimp: heap buffer overflow in gif export on oversized -
CVE-2026-107168
M17n-lib: parser infinite loop on malformed utf-8 in count_u -
CVE-2026-106061
Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnai
Same vendor: Red Hat
-
CVE-2026-107174
Source-to-image: source-to-image: security boundary bypass v -
CVE-2026-107169
M17n-lib: null-pointer write in read_mtext_element() on malf -
CVE-2026-107167
M17n-lib: heap use-after-free write in re_init_ic() -
CVE-2026-106064
Gimp: gimp: heap buffer overflow in gif export on oversized -
CVE-2026-107168
M17n-lib: parser infinite loop on malformed utf-8 in count_u
Same weakness: CWE-476
-
CVE-2026-107169
M17n-lib: null-pointer write in read_mtext_element() on malf -
CVE-2026-102169
Security Advisory 0194 -
CVE-2026-104044
Sssd: sssd: denial of service via crafted passkey kerberos a -
CVE-2026-104038
Sssd: sssd: denial of service via missing sid extension in c -
CVE-2026-93316
Starting daemon with --cdi-disabled flag can lead to panic o
V. Comments for CVE-2026-107170
No comments yet