Skip to content
fr Sign in
5.6 Medium

CVE-2025-5745 The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to…

Description

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.

Affected products and versions

Product Affected versions Fixed in
glibc 2.40 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of glibc

The 35 CVEs of glibc →
CVE-2026-122054 BIG-HKSCS decoding hang on crafted input 5.9 Medium CVE-2026-84243 The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable… 7.0 High CVE-2026-97399 The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte… 3.7 Low CVE-2026-95818 A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44… 3.6 Low
Track this CVE