{"id":"CVE-2026-57053","aliases":["DEBIAN-CVE-2026-57053","EUVD-2026-38523","GHSA-xpv7-vm32-p7wv","JLSEC-2026-667","MGASA-2026-0262","OESA-2026-2932","OESA-2026-2933","OESA-2026-2934","OESA-2026-2935","OESA-2026-2983","RHSA-2026:42125","SUSE-SU-2026:23621-1","SUSE-SU-2026:4000-1","SUSE-SU-2026:4081-1","UBUNTU-CVE-2026-57053","USN-8521-1","openSUSE-SU-2026:21758-1"],"status":"published","title":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode...","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00139,"percentile":0.03341,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1284"],"published":"2026-06-23T16:40:22Z","modified":"2026-10-26T11:47:32Z","fixes":[{"ecosystem":"Debian:14","package":"libidn","fixed_in":["1.44-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"libidn_jll","fixed_in":["1.44.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:10","package":"libidn","fixed_in":["1.43-2.1.mga10"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libidn","fixed_in":["1.41-2.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"libidn","fixed_in":["1.41-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"libidn","fixed_in":["1.41-2.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libidn","fixed_in":["1.36-4.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libidn","fixed_in":["1.41-2.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"libidn","fixed_in":["1.41-2.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"idn2","fixed_in":["0:2.3.8-4.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libidn2","fixed_in":["0:2.3.8-4.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"libidn2-devel","fixed_in":["0:2.3.8-4.hum1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libidn","fixed_in":["1.43-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libidn","fixed_in":["1.43-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libidn","fixed_in":["1.34-150000.3.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libidn","fixed_in":["1.28-5.9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libidn","fixed_in":["1.38-4ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libidn","fixed_in":["1.42-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libidn","fixed_in":["1.43-2ubuntu0.26.04.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"libidn","fixed_in":["1.43-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.41-1","1.42-1","1.42-2","1.42-3","1.43-1","1.43-2","1.43-3","1.44-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.43-1","1.43-2","1.43-3","1.44-1"]},{"source":"osv","ecosystem":"Debian:14","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44-1"}]}],"versions":["1.43-1","1.43-2","1.43-3"]},{"source":"osv","ecosystem":"Julia","package":"libidn_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.44.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:10","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43-2.1.mga10"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36-4.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41-2.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"idn2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-4.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libidn2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-4.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libidn2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.8-4.hum1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34-150000.3.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28-5.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.28-1ubuntu1","1.28-1ubuntu2","1.28-1ubuntu2.1","1.28-1ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.28-1ubuntu2","1.32-3ubuntu1","1.32-3ubuntu1.1","1.32-3ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.33-2","1.33-2.1","1.33-2.1ubuntu1","1.33-2.1ubuntu1.1","1.33-2.1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.33-2.2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38-4ubuntu1.1"}]}],"versions":["1.33-3","1.33-3build1","1.38-4","1.38-4build1","1.38-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42-1ubuntu0.1"}]}],"versions":["1.41-1","1.42-1","1.42-1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.43-1","1.43-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43-2ubuntu0.26.04.1"}]}],"versions":["1.43-2","1.43-2build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38-4ubuntu1.1"}]}],"versions":["1.33-3","1.33-3build1","1.38-4","1.38-4build1","1.38-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42-1ubuntu0.1"}]}],"versions":["1.41-1","1.42-1","1.42-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43-2ubuntu0.26.04.1"}]}],"versions":["1.43-2","1.43-2build1"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libidn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43-160000.3.1"}]}]}],"products":[{"vendor":"gnu","product":"libidn"}],"references":[{"url":"https://lists.gnu.org/archive/html/help-libidn/2026-06/msg00001.html","tags":["Mailing List","web","article","report"]},{"url":"https://lists.gnu.org/archive/html/help-libidn/2026-05/msg00000.html","tags":["Exploit","Mailing List","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57053","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-xpv7-vm32-p7wv","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-57053","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0262.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35726","tags":["report"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2026\u0026m=slackware-security.355846","tags":["web"]},{"url":"https://lists.gnu.org/archive/html/help-libidn/2025-06/msg00000.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8521-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2932","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2933","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2934","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2935","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2983","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42125","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-57053","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42125.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2491878","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-57053","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623621-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268965","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-57053","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264000-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264081-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-57053","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-57053","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.","status":"published","published":"2026-06-23T16:40:22.947Z","modified":"2026-06-23T17:40:14.173Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T13:43:44.898272Z"}],"euvd":[{"id":"EUVD-2026-38523","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.","status":"published","published":"2026-06-23T16:40:22Z","modified":"2026-06-23T17:40:14Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T18:20:31.51905Z"}],"ghsa":[{"id":"GHSA-xpv7-vm32-p7wv","title":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode...","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.","status":"published","published":"2026-06-23T18:31:45Z","modified":"2026-06-23T18:31:56Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T15:08:57.478089Z"}],"nvd":[{"id":"CVE-2026-57053","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.","status":"published","published":"2026-06-23T18:18:10.827Z","modified":"2026-10-25T23:10:00.167Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-1284"],"updated_at":"2026-11-02T14:12:25.288279Z"}],"osv":[{"id":"DEBIAN-CVE-2026-57053","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.","status":"published","published":"2026-06-23T18:18:10.827Z","modified":"2026-10-26T11:47:32.810115983Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"JLSEC-2026-667","title":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs...","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in `idna_to_unicode_internal`. The affected code is not present in libidn2.","status":"published","published":"2026-07-14T14:59:33.004Z","modified":"2026-07-25T18:24:45.252579465Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2026-2932","title":"libidn security update","description":"GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA 2003 specifications. Libidn\u0026amp;apos;s purpose is to encode and decode internationalized domain names.\r\n\r\nSecurity Fix(es):\n\nGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.(CVE-2026-57053)","status":"published","published":"2026-07-09T11:11:50Z","modified":"2026-08-18T01:21:17.180289601Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2933","title":"libidn security update","description":"GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA 2003 specifications. Libidn\u0026amp;apos;s purpose is to encode and decode internationalized domain names.\r\n\r\nSecurity Fix(es):\n\nGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.(CVE-2026-57053)","status":"published","published":"2026-07-09T11:11:50Z","modified":"2026-08-18T01:21:16.96774393Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2934","title":"libidn security update","description":"GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA 2003 specifications. Libidn\u0026amp;apos;s purpose is to encode and decode internationalized domain names.\r\n\r\nSecurity Fix(es):\n\nGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.(CVE-2026-57053)","status":"published","published":"2026-07-09T11:11:50Z","modified":"2026-08-18T01:21:16.0728063Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2935","title":"libidn security update","description":"GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA 2003 specifications. Libidn\u0026amp;apos;s purpose is to encode and decode internationalized domain names.\r\n\r\nSecurity Fix(es):\n\nGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.(CVE-2026-57053)","status":"published","published":"2026-07-09T11:11:50Z","modified":"2026-08-18T01:21:16.83930863Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-2983","title":"libidn security update","description":"GNU Libidn is a fully documented implementation of the Stringprep, Punycode and IDNA 2003 specifications. Libidn\u0026amp;apos;s purpose is to encode and decode internationalized domain names.\r\n\r\nSecurity Fix(es):\n\nGNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.(CVE-2026-57053)","status":"published","published":"2026-07-19T11:11:53Z","modified":"2026-08-18T01:21:17.77256174Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:42125","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-08-01T10:10:22Z","modified":"2026-10-06T10:31:26.793445841Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"UBUNTU-CVE-2026-57053","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.","status":"published","published":"2026-06-23T18:18:00Z","modified":"2026-07-09T21:32:00.287032307Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"},{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T16:56:41.911783Z"},{"id":"MGASA-2026-0262","title":"Updated libidn packages fix security vulnerability","description":"GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized\nmemory in the ToUnicode APIs because of mishandling in\nidna_to_unicode_internal. The affected code is not present in libidn2.\n(CVE-2026-57053)\n","status":"published","published":"2026-07-18T18:27:11Z","modified":"2026-07-18T18:30:05.628642189Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:21758-1","title":"Security update for libidn","description":"This update for libidn fixes the following issue:\n\n- CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).\n","status":"published","published":"2026-09-04T07:32:32Z","modified":"2026-09-09T18:23:14.471285005Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23621-1","title":"Security update for libidn","description":"This update for libidn fixes the following issue:\n\n- CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).\n","status":"published","published":"2026-09-04T07:29:51Z","modified":"2026-09-29T18:23:19.909357627Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:4000-1","title":"Security update for libidn","description":"This update for libidn fixes the following issue:\n\n- CVE-2026-57053: out-of-bounds read in `ToUnicode` APIs (bsc#1268965).\n","status":"published","published":"2026-09-07T07:25:01Z","modified":"2026-09-13T18:23:14.253299365Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4081-1","title":"Security update for libidn","description":"This update for libidn fixes the following issue:\n\n- CVE-2026-57053: out-of-bounds read in ToUnicode APIs (bsc#1268965).\n","status":"published","published":"2026-09-08T07:14:43Z","modified":"2026-09-13T18:23:20.362983044Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8521-1","title":"libidn vulnerability","description":"It was discovered that Libidn incorrectly handled certain internationalized\ndomain name strings. An attacker could possibly use this issue to obtain\nsensitive information or cause a denial of service.","status":"published","published":"2026-07-09T12:36:22Z","modified":"2026-07-09T21:44:27.112918483Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}