| CVE-2026-122054 |
BIG-HKSCS decoding hang on crafted input
|
5.9
Moyenne
|
4 nov. 2026 |
| CVE-2026-84243 |
The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable…
|
7.0
Élevée
|
30 oct. 2026 |
| CVE-2026-97399 |
The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte…
|
3.7
Faible
|
28 sept. 2026 |
| CVE-2026-95818 |
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44…
|
3.6
Faible
|
22 sept. 2026 |
| CVE-2026-86805 |
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc)…
|
6.3
Moyenne
|
22 sept. 2026 |
| CVE-2026-8674 |
Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search…
|
5.3
Moyenne
|
17 sept. 2026 |
| CVE-2026-80489 |
Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the…
|
5.9
Moyenne
|
15 sept. 2026 |
| CVE-2026-77117 |
Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the…
|
5.9
Moyenne
|
15 sept. 2026 |
| CVE-2026-19542 |
Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the…
|
5.6
Moyenne
|
14 sept. 2026 |
| CVE-2026-19499 |
Calling strfmon and strfmon_l in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied…
|
7.7
Élevée
|
14 sept. 2026 |
| CVE-2026-89092 |
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server…
|
4.2
Moyenne
|
11 sept. 2026 |
| CVE-2026-18374 |
Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in…
|
4.9
Moyenne
|
27 août 2026 |
| CVE-2026-6791 |
When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts…
|
6.6
Moyenne
|
10 août 2026 |
| CVE-2026-6238 |
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail…
|
6.5
Moyenne
|
28 avr. 2026 |
| CVE-2026-5435 |
The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to…
|
7.3
Élevée
|
28 avr. 2026 |
| CVE-2026-5450 |
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to…
|
9.8
Critique
|
20 avr. 2026 |
| CVE-2026-5928 |
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps…
|
7.5
Élevée
|
20 avr. 2026 |
| CVE-2026-5358 |
The obsolete nis_local_principal function in the GNU C Library version 2.43 and older may overflow a buffer in the…
|
9.1
Critique
|
20 avr. 2026 |
| CVE-2026-4046 |
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when…
|
7.5
Élevée
|
30 mars 2026 |
| CVE-2026-4438 |
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the…
|
5.4
Moyenne
|
20 mars 2026 |
| CVE-2026-4437 |
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the…
|
7.5
Élevée
|
20 mars 2026 |
| CVE-2026-3904 |
Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C…
|
6.2
Moyenne
|
11 mars 2026 |
| CVE-2025-15281 |
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may…
|
7.5
Élevée
|
20 janv. 2026 |
| CVE-2026-0915 |
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for…
|
7.5
Élevée
|
15 janv. 2026 |
| CVE-2026-0861 |
Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C…
|
8.4
Élevée
|
14 janv. 2026 |