inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to read abyss[-1] via an embedded NUL byte after an overlong line.
CVSS 4.0MEDIUM 4.8·Local·No auth·User interaction·EPSS 0.00127·Published 2026-11-02·Fixed in r63CWE-127
