CVE-2016-8859: Etalabs Musl

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.

Affected products

• Etalabs Musl: up to and including 1.1.15

Published 2017-02-13. Last modified 2026-06-17.