3.7
Faible
CVE-2026-97399 The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte…
Description
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| glibc 2.24 | 2.24 → < 2.45 | 2.45 |
Références
- sourceware.org sourceware.org
- sourceware.org sourceware.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de glibc
Les 35 CVE de glibc →
CVE-2026-122054
BIG-HKSCS decoding hang on crafted input
5.9
Moyenne
CVE-2026-84243
The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable…
7.0
Élevée
CVE-2026-95818
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44…
3.6
Faible
CVE-2026-86805
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc)…
6.3
Moyenne