The GNU C Library

22 CVEs across 1 The GNU C Library products. Browse The GNU C Library vulnerabilities, severities, and proof-of-concept exploits.

The GNU C Library products with known CVEs

ProductCVEs
Glibc22
The GNU C Library CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-67912026-08-10When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home d…
CVE-2026-6238Medium6.52026-04-28The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against th…
CVE-2026-5435High7.32026-04-28The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, an…
CVE-2026-5928High7.52026-04-20Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte characte…
CVE-2026-5450Critical9.82026-04-20Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with…
CVE-2026-4046High7.52026-03-30The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 ch…
CVE-2026-4438Medium5.42026-03-20Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version…
CVE-2026-4437High7.52026-03-20Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version…
CVE-2026-3904Medium6.22026-03-11Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64…
CVE-2025-15281High7.52026-01-20Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialize…
CVE-2026-0915High7.52026-01-15Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued netw…
CVE-2026-0861High8.42026-01-14Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may resul…
CVE-2025-80582025-07-23The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished eith…
CVE-2025-5745Medium5.62025-06-05The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving…
CVE-2025-5702Medium5.62025-06-05The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving…
CVE-2025-4802High7.82025-05-16Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared…
CVE-2025-0395Medium6.22025-01-22When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and siz…
CVE-2024-33602High7.42024-05-06nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache can corrupt memory when the NSS callbac…
CVE-2024-33601High7.32024-05-06nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and thes…
CVE-2024-33600Medium5.92024-05-06nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, th…
CVE-2024-33599High8.12024-05-06nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subseque…
CVE-2024-2961High7.32024-04-17The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the I…