The GNU C Library glibc

• CVE-2026-122054 Medium 5.9 BIG-HKSCS decoding hang on crafted input 0.4%
• CVE-2026-84243 High 7.0 gettext: Directory traversal via the LANGUAGE environment variable 0.3%
• CVE-2026-97399 Low 3.7 One-byte overread in strncasecmp on Power8 0.3%
• CVE-2026-95818 Low 3.6 AT_SECURE program buffer overflow via $ORIGIN processing 0.1%
• CVE-2026-86805 Medium 6.3 AT_SECURE programs may load attacker-controlled code via $ORIGIN <0.1%
• CVE-2026-8674 Medium 5.3 Assertion failure in the DNS stub resolver with a long search domain 0.3%
• CVE-2026-80489 Medium 5.9 EUC_JISX0213 decoding may hang on crafted input 0.4%
• CVE-2026-77117 Medium 5.9 SHIFT_JISX0213 decoding may hang on crafted input 0.4%
• CVE-2026-19542 Medium 5.6 Stack-based out-of-bounds write in tdelete during tree rebalancing 0.2%
• CVE-2026-19499 High 7.7 Buffer overflow in strfmon and strfmon_l right-justification padding 0.3%
• CVE-2026-89092 Medium 4.2 Stack overflow in nscd due to unbounded alloca use 0.2%
• CVE-2026-18374 Medium 4.9 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when 0.1%
• CVE-2026-6791 Medium 6.6 Potential stack-based buffer clash during tilde expansion in wordexp 0.2%
• CVE-2026-6238 Medium 6.5 Buffer overread in ns_printrrf with corrupted RDATA field 0.4%
• CVE-2026-5435 High 7.3 Potential buffer overflow in ns_sprintrrf TSIG handling path 0.2%
• CVE-2026-5450 Critical 9.8 scanf %mc off-by-one heap buffer overflow 0.5%
• CVE-2026-5928 High 7.5 Potential buffer under-read in ungetwc 0.4%
• CVE-2026-4046 High 7.5 iconv crash due to assertion failure with untrusted input 0.4%
• CVE-2026-4438 Medium 5.4 gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames 0.3%
• CVE-2026-4437 High 7.5 gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response 0.3%
• CVE-2026-3904 Medium 6.2 Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on i 0.2%
• CVE-2025-15281 High 7.5 wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 0.5%
• CVE-2026-0915 High 7.5 getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler 0.6%
• CVE-2026-0861 High 8.4 Integer overflow in memalign leads to heap corruption 0.4%
• CVE-2025-8058 Medium 5.9 The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an int 0.2%
• CVE-2025-5745 Medium 5.6 The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those register 0.3%
• CVE-2025-5702 Medium 5.6 The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers 0.3%
• CVE-2025-4802 High 7.8 Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid bi 0.6%
• CVE-2025-0395 Medium 6.2 When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer 0.4%
• CVE-2024-33602 High 7.4 nscd: netgroup cache assumes NSS callback uses in-buffer strings 0.4%
• CVE-2024-33601 High 7.3 nscd: netgroup cache may terminate daemon on memory allocation failure 1.1%
• CVE-2024-33600 Medium 5.9 nscd: Null pointer crashes after notfound response 1.2%
• CVE-2024-33599 High 8.1 nscd: Stack-based buffer overflow in netgroup cache 1.3%
• CVE-2024-2961 High 7.3 The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may b 88.3%