A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.00957·Published 2023-01-31·Fixed in v0.12.6CWE-121