Skip to content
fr Sign in
2.5 Low

CVE-2026-18743 A flaw was found in popt

Description

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

Affected products and versions

Product Affected versions Fixed in
popt 1.11 1.11 → latest No fix stated
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Hardened Images 1.19 earliest → < 1.19-11.1.hum1 1.19-11.1.hum1
Red Hat OpenShift Container Platform 4 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of popt

The 3 CVEs of popt →
CVE-2026-18839 An integer underflow was found in the popt library when formatting help text for option tables that exceed the… 2.2 Low CVE-2026-18739 A flaw was found in popt, a command-line option parsing library 2.5 Low
Track this CVE