The Gnu C Library Glibc vulnerabilities

CVE-2025-5702 [MEDIUM] CWE-665 CVE-2025-5702: The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the call

CVE-2025-5745 [MEDIUM] CWE-665 CVE-2025-5745: The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the ca

CVE-2026-8674 [MEDIUM] CWE-617 CVE-2026-8674: Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment varia Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates the search list when copying it into the fixed-size _r

CVE-2026-18374 [MEDIUM] CWE-787 CVE-2026-18374: Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fop Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in applications in common GNU/Linux distributions and ap

CVE-2026-5358 CWE-120 CVE-2026-5358: The obsolete nis_local_principal function in the GNU C Library version 2.43 and older may overflow a The obsolete nis_local_principal function in the GNU C Library version 2.43 and older may overflow a buffer in the data section, which could allow an attacker to spoof a crafted response to a UDP request generated by this function and overwrite neighboring static data in the requesting application. NIS support is obsolete and has been deprecated in the GNU C

CVE-2026-3904 [MEDIUM] CWE-366 CVE-2026-3904: Calling NSS-backed functions that support caching via nscd may call the nscd client side code and i Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client may call memcmp on inputs that are concurrently modified by other processes or threads and crash. The nscd client in the GNU C Library uses the memcmp function with inputs th

CVE-2025-0395 [MEDIUM] CWE-131 CVE-2025-0395: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate en When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

CVE-2025-8058 [MEDIUM] CWE-415 CVE-2025-8058: The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if s The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affe

CVE-2026-4438 [MEDIUM] CWE-20 CVE-2026-4438: Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library' Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification.

CVE-2026-89092 [MEDIUM] CWE-789 CVE-2026-89092: The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malici The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted DNS server for name resolution, with the compromised

CVE-2026-95818 [LOW] CWE-121 CVE-2026-95818: A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2. A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs. When such a program's DT_RPATH or DT_RUNPATH begins with $ORIGIN and is followed by NUL or '/' the loader both reads past the end of the path b

CVE-2026-97399 [LOW] CWE-126 CVE-2026-97399: The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture m The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up