{"id":"CVE-2026-108063","published":"2026-10-09T14:17:20.130","lastModified":"2026-10-09T16:37:45.710","description":"A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash, resulting in a Denial of Service (DoS).","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","cwes":["CWE-476"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-108063","tags":[]},{"url":"https://github.com/libhangul/libhangul/blob/5094421d9586294b2aad09924b9a54e2e6060f06/hangul/hanja.c","tags":[]},{"url":"https://github.com/libhangul/libhangul/issues/106","tags":[]}],"exploitRefs":[{"url":"https://github.com/libhangul/libhangul/blob/5094421d9586294b2aad09924b9a54e2e6060f06/hangul/hanja.c","tags":[]},{"url":"https://github.com/libhangul/libhangul/issues/106","tags":[]}],"hasPoc":true,"ai":null}