Skip to contentThe Gnu C Library Glibc vulnerabilities
- the gnu c library glibcDouble free after allocation failure in regcomp and regexecCVE-2026-1002903.7 Low
- the gnu c library glibcOne-byte buffer overflow in wide scanf %s and %[ conversionsCVE-2026-1158194.8 Medium
- the gnu c library glibcBIG-HKSCS decoding hang on crafted inputCVE-2026-122054Fix available5.9 Medium
- the gnu c library glibcgettext: Directory traversal via the LANGUAGE environment variableCVE-2026-84243Fix available7.0 High
- the gnu c library glibcOne-byte overread in strncasecmp on Power8CVE-2026-97399Fix available3.7 Low
- the gnu c library glibcAT_SECURE program buffer overflow via $ORIGIN processingCVE-2026-95818Fix available3.6 Low
- the gnu c library glibcAT_SECURE programs may load attacker-controlled code via $ORIGINCVE-2026-86805Fix available6.3 Medium
- the gnu c library glibcAssertion failure in the DNS stub resolver with a long search domainCVE-2026-8674Fix available5.3 Medium
- the gnu c library glibcStack overflow in nscd due to unbounded alloca useCVE-2026-89092Fix available4.2 Medium
- the gnu c library glibcEUC_JISX0213 decoding may hang on crafted inputCVE-2026-80489Fix available5.9 Medium
- the gnu c library glibcPassing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the ...CVE-2026-18374Fix available4.9 Medium
- the gnu c library glibcSHIFT_JISX0213 decoding may hang on crafted inputCVE-2026-77117Fix available5.9 Medium
- the gnu c library glibcBuffer overflow in strfmon and strfmon_l right-justification paddingCVE-2026-19499Fix available7.7 High
- the gnu c library glibcStack-based out-of-bounds write in tdelete during tree rebalancingCVE-2026-19542Fix available5.6 Medium
- glibcwordexp with WRDE_APPEND can return or use invalid memoryCVE-2026-6368Fix available2.1 Low
- the gnu c library glibcPotential stack-based buffer clash during tilde expansion in wordexpCVE-2026-6791Fix available6.6 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreBuffer overread in ns_printrrf with corrupted RDATA fieldCVE-2026-6238Fix available6.5 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePotential buffer overflow in ns_sprintrrf TSIG handling pathCVE-2026-5435Fix available7.3 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morescanf %mc off-by-one heap buffer overflowCVE-2026-5450Fix available9.8 Critical
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morePotential buffer under-read in ungetwcCVE-2026-5928Fix available7.5 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreiconv crash due to assertion failure with untrusted inputCVE-2026-4046Fix available7.5 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r return invalid DNS hostnamesCVE-2026-4438Fix available5.4 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r may incorrectly handle DNS responseCVE-2026-4437Fix available7.5 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreCalling NSS-backed functions that support caching via nscd may call the
nscd client side code...CVE-2026-3904Fix available6.2 Medium
- gnu glibcwordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memoryCVE-2025-15281Fix available7.5 High
- gnu glibcgetnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovlerCVE-2026-0915Public exploitFix available7.5 High
- gnu glibcInteger overflow in memalign leads to heap corruptionCVE-2026-0861Fix available8.4 High
- the gnu c library glibcThe regcomp function in the GNU C library version from 2.4 to 2.41 is
subject to a double free...CVE-2025-8058Fix available5.9 Medium
- gnu glibcThe strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40...CVE-2025-5745Fix available5.6 Medium
- gnu glibcThe strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39...CVE-2025-5702Fix available5.6 Medium
- gnu glibcUntrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to...CVE-2025-4802Public exploitFix available7.8 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +12 more +14 moreWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate...CVE-2025-0395Fix available6.2 Medium
- gnu glibc, debian linux, netapp element software +11 more +13 morenscd: netgroup cache assumes NSS callback uses in-buffer stringsCVE-2024-33602Fix available7.4 High
- gnu glibc, debian linux, netapp h300s firmware +11 more +13 morenscd: netgroup cache may terminate daemon on memory allocation failureCVE-2024-33601Fix available7.3 High
- gnu glibc, debian linux, netapp active iq unified manager +12 more +14 morenscd: Null pointer crashes after notfound responseCVE-2024-33600Fix available5.9 Medium
- gnu glibc, debian linux, netapp h300s firmware +8 more +10 morenscd: Stack-based buffer overflow in netgroup cacheCVE-2024-33599Fix available8.1 High
- debian linux, gnu glibc, netapp active iq unified manager +13 more +15 moreThe iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer...CVE-2024-2961Public exploitFix availableEPSS 88.3%7.3 High
- gnu glibc, debian linux, netapp e-series performance analyzer +10 more +12 moreA flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to...CVE-2021-3999Fix available7.8 High
- gnu glibc, netapp h300s firmware, h410c firmware +7 more +9 moreA flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...CVE-2021-3998Fix available7.5 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +3 more +5 moreAn out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal...CVE-2020-1751Fix available5.1 Medium
- gnu glibc, canonical ubuntu linux, debian linux +8 more +10 moreA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...CVE-2020-1752Fix available7.0 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap...CVE-2019-1010025Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Re-mapping current loaded libray with malicious ELF file. The...CVE-2019-1010023Fix availableDisputed8.8 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using...CVE-2019-1010024Disputed5.3 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack...CVE-2019-1010022Fix availableDisputed9.8 Critical