5.6
Moyenne
CVE-2025-5702 The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to…
Description
The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| glibc | 2.39 | Pas de correctif indiqué |
Références
- sourceware.org sourceware.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de glibc
Les 35 CVE de glibc →
CVE-2026-122054
BIG-HKSCS decoding hang on crafted input
5.9
Moyenne
CVE-2026-84243
The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable…
7.0
Élevée
CVE-2026-97399
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte…
3.7
Faible
CVE-2026-95818
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44…
3.6
Faible