PT-2026-42476 · Unknown · Uncrustify

Criticayon · Published 2026-05-21 · Updated 2026-05-21 · CVE-2026-36189

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Uncrustify version Uncrustify d-0.82.0-132-bcc41cbdc

Description A buffer overflow allows a local attacker to cause a denial of service. This issue occurs within the uncrustify executable components, specifically involving the check template() function in check template.cpp and the tokenize cleanup() function.

Recommendations Update to the version containing commit 68e67b9a1435a1bb173b106fedb4a4f510972bdc.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2026-36189

Affected Products

Uncrustify

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-36189 · Security Note
• https://github.com/uncrustify/uncrustify/pull/4641 · Note
• https://github.com/uncrustify/uncrustify%2Chttps://github.com/uncrustify/uncrustify/issues/4636%2C · Note
• https://gist.github.com/Criticayon/5da6d6c9cf068e494347c659d01982a9 · Note
• https://t.me/CVEtracker/54528 · Telegram Post