Out-of-bounds Read in Gnu Coreutils
CVE-2026-56391
GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processi…
Vulnerability class: Buffer Overflow
Affected products
- Gnu Coreutils — versions 9.5
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)
- cvd@cert.pl (patch)