| CVE-2026-122054 |
BIG-HKSCS decoding hang on crafted input
|
5.9
Medium
|
Nov 4, 2026 |
| CVE-2026-84243 |
The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable…
|
7.0
High
|
Oct 30, 2026 |
| CVE-2026-97399 |
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte…
|
3.7
Low
|
Sep 28, 2026 |
| CVE-2026-95818 |
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44…
|
3.6
Low
|
Sep 22, 2026 |
| CVE-2026-86805 |
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc)…
|
6.3
Medium
|
Sep 22, 2026 |
| CVE-2026-8674 |
Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search…
|
5.3
Medium
|
Sep 17, 2026 |
| CVE-2026-80489 |
Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the…
|
5.9
Medium
|
Sep 15, 2026 |
| CVE-2026-77117 |
Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the…
|
5.9
Medium
|
Sep 15, 2026 |
| CVE-2026-19542 |
Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the…
|
5.6
Medium
|
Sep 14, 2026 |
| CVE-2026-19499 |
Calling strfmon and strfmon_l in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied…
|
7.7
High
|
Sep 14, 2026 |
| CVE-2026-89092 |
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server…
|
4.2
Medium
|
Sep 11, 2026 |
| CVE-2026-18374 |
Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in…
|
4.9
Medium
|
Aug 27, 2026 |
| CVE-2026-6791 |
When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts…
|
6.6
Medium
|
Aug 10, 2026 |
| CVE-2026-6238 |
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail…
|
6.5
Medium
|
Apr 28, 2026 |
| CVE-2026-5435 |
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to…
|
7.3
High
|
Apr 28, 2026 |
| CVE-2026-5450 |
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to…
|
9.8
Critical
|
Apr 20, 2026 |
| CVE-2026-5928 |
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps…
|
7.5
High
|
Apr 20, 2026 |
| CVE-2026-5358 |
The obsolete nis_local_principal function in the GNU C Library version 2.43 and older may overflow a buffer in the…
|
9.1
Critical
|
Apr 20, 2026 |
| CVE-2026-4046 |
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when…
|
7.5
High
|
Mar 30, 2026 |
| CVE-2026-4438 |
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the…
|
5.4
Medium
|
Mar 20, 2026 |
| CVE-2026-4437 |
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the…
|
7.5
High
|
Mar 20, 2026 |
| CVE-2026-3904 |
Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C…
|
6.2
Medium
|
Mar 11, 2026 |
| CVE-2025-15281 |
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may…
|
7.5
High
|
Jan 20, 2026 |
| CVE-2026-0915 |
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for…
|
7.5
High
|
Jan 15, 2026 |
| CVE-2026-0861 |
Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C…
|
8.4
High
|
Jan 14, 2026 |