TG
Vendor
The GNU C Library
28
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97399 | GL glibc The GNU C Library | 3.7 | Sep 28 | One-byte overread in strncasecmp on Power8 |
| CVE-2026-95818 | GL glibc The GNU C Library | 3.6 | Sep 22 | AT_SECURE program buffer overflow via $ORIGIN processing |
| CVE-2026-86805 | GL glibc The GNU C Library | 6.3 | Sep 22 | AT_SECURE programs may load attacker-controlled code via $ORIGIN |
| CVE-2026-8674 | GL glibc The GNU C Library | 5.3 | Sep 17 | Assertion failure in the DNS stub resolver with a long search domain |
| CVE-2026-80489 | GL glibc The GNU C Library | 5.9 | Sep 15 | EUC_JISX0213 decoding may hang on crafted input |
| CVE-2026-77117 | GL glibc The GNU C Library | 5.9 | Sep 15 | SHIFT_JISX0213 decoding may hang on crafted input |
| CVE-2026-19542 | GL glibc The GNU C Library | 5.6 | Sep 14 | Stack-based out-of-bounds write in tdelete during tree rebalancing |
| CVE-2026-19499 | GL glibc The GNU C Library | 7.7 | Sep 14 | Buffer overflow in strfmon and strfmon_l right-justification padding |
| CVE-2026-89092 | GL glibc The GNU C Library | 4.2 | Sep 11 | Stack overflow in nscd due to unbounded alloca use |
| CVE-2026-18374 | GL glibc The GNU C Library | 4.9 | Aug 27 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap… |
| CVE-2026-6791 | GL glibc The GNU C Library | 6.6 | Aug 10 | Potential stack-based buffer clash during tilde expansion in wordexp |
| CVE-2026-6238 | GL glibc The GNU C Library | 6.5 | Apr 28 | Buffer overread in ns_printrrf with corrupted RDATA field |
| CVE-2026-5435 | GL glibc The GNU C Library | 7.3 | Apr 28 | Potential buffer overflow in ns_sprintrrf TSIG handling path |
| CVE-2026-5450 | GL glibc The GNU C Library | 9.8 | Apr 20 | scanf %mc off-by-one heap buffer overflow |
| CVE-2026-5928 | GL glibc The GNU C Library | 7.5 | Apr 20 | Potential buffer under-read in ungetwc |
| CVE-2026-4046 | GL glibc The GNU C Library | 7.5 | Mar 30 | iconv crash due to assertion failure with untrusted input |
| CVE-2026-4438 | GL glibc The GNU C Library | 5.4 | Mar 20 | gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames |
| CVE-2026-4437 | GL glibc The GNU C Library | 7.5 | Mar 20 | gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response |
| CVE-2026-3904 | GL glibc The GNU C Library | 6.2 | Mar 11 | Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client… |
| CVE-2025-15281 | GL glibc The GNU C Library | 7.5 | Jan 20 | wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory |
| CVE-2026-0915 | GL glibc The GNU C Library | 7.5 | Jan 15 | getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler |
| CVE-2026-0861 | GL glibc The GNU C Library | 8.4 | Jan 14 | Integer overflow in memalign leads to heap corruption |
| CVE-2025-0395 | GL glibc The GNU C Library | 6.2 | Jan 22 | When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which… |
| CVE-2024-33602 | GL glibc The GNU C Library | 7.4 | May 6 | nscd: netgroup cache assumes NSS callback uses in-buffer strings |
| CVE-2024-33601 | GL glibc The GNU C Library | 7.3 | May 6 | nscd: netgroup cache may terminate daemon on memory allocation failure |
| CVE-2024-33600 | GL glibc The GNU C Library | 5.9 | May 6 | nscd: Null pointer crashes after notfound response |
| CVE-2024-33599 | GL glibc The GNU C Library | 8.1 | May 6 | nscd: Stack-based buffer overflow in netgroup cache |
| CVE-2024-2961 | GL glibc The GNU C Library | 7.3 | Apr 17 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT… |