CVE-2026-75432

Published: Sep 22, 2026Modified: Oct 3, 2026

5.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Exploitability: 2.5 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components

Related CWEs

CWE-822

Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

References (3)

https://github.com/jbeder/yaml-cpp/issues/1475

Source: cve@mitre.org

https://github.com/jbeder/yaml-cpp/pull/1476

Source: cve@mitre.org

https://github.com/jbeder/yaml-cpp/issues/1475

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.