The GNU C Library glibc
32 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-97399 | 2.24 – < 2.45 | One-byte overread in strncasecmp on Power8 | LOW 3.7 | 0.3 % | ||
| CVE-2026-95818 | 2.14 – < 2.45 | AT_SECURE program buffer overflow via $ORIGIN processing | LOW 3.6 | 0.1 % | ||
| CVE-2026-86805 | 2.14 – < 2.45 | AT_SECURE programs may load attacker-controlled code via $ORIGIN | MEDIUM 6.3 | 0.1 % | ||
| CVE-2026-8674 | 2.26 – 2.44 | Assertion failure in the DNS stub resolver with a long search domain | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-80489 | 2.3 – 2.44 | EUC_JISX0213 decoding may hang on crafted input | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-77117 | 2.3 – 2.44 | SHIFT_JISX0213 decoding may hang on crafted input | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-19542 | 2.1 – 2.44 | Stack-based out-of-bounds write in tdelete during tree rebalancing | MEDIUM 5.6 | 0.2 % | ||
| CVE-2026-19499 | 2.38 – 2.44 | Buffer overflow in strfmon and strfmon_l right-justification padding | HIGH 7.7 | 0.3 % | ||
| CVE-2026-89092 | 2.3.4 – < 2.45 | Stack overflow in nscd due to unbounded alloca use | MEDIUM 4.2 | 0.2 % | ||
| CVE-2026-18374 | < 2.45 | Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library versio | MEDIUM 4.9 | 0.1 % | ||
| CVE-2026-6791 | 2.0 – 2.43 | Potential stack-based buffer clash during tilde expansion in wordexp | MEDIUM 6.6 | 0.2 % | ||
| CVE-2026-6238 | 2.0.1 – 2.43 | Buffer overread in ns_printrrf with corrupted RDATA field | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-5435 | 2.2 – * | Potential buffer overflow in ns_sprintrrf TSIG handling path | HIGH 7.3 | 0.2 % | ||
| CVE-2026-5450 | ≥ 2.7 | scanf %mc off-by-one heap buffer overflow | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-5928 | 2.1.1-89 – 2.43 | Potential buffer under-read in ungetwc | HIGH 7.5 | 0.4 % | ||
| CVE-2026-4046 | 2.3.3 – 2.43 | iconv crash due to assertion failure with untrusted input | HIGH 7.5 | 0.4 % | ||
| CVE-2026-4438 | 2.34 – 2.43 | gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-4437 | 2.34 – 2.43 | gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response | HIGH 7.5 | 0.3 % | ||
| CVE-2026-3904 | 2.35 – < 2.37 | Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under h | MEDIUM 6.2 | 0.1 % | ||
| CVE-2025-15281 | 2.0 – 2.42 | wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory | HIGH 7.5 | 0.5 % | ||
| CVE-2026-0915 | 2.0 – 2.42 | getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler | HIGH 7.5 | 0.6 % | ||
| CVE-2026-0861 | 2.30 – 2.42 | Integer overflow in memalign leads to heap corruption | HIGH 8.4 | 0.4 % | ||
| CVE-2025-8058 | 2.4 – < 2.42 | The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be | MEDIUM 5.9 | 0.2 % | ||
| CVE-2025-5745 | 2.40 | The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to | MEDIUM 5.6 | 0.3 % | ||
| CVE-2025-5702 | 2.39 | The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to | MEDIUM 5.6 | 0.3 % | ||
| CVE-2025-4802 | 2.27 – < 2.39 | Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of | HIGH 7.8 | 0.6 % | ||
| CVE-2025-0395 | 2.13 – 2.40 | When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure mes | MEDIUM 6.2 | 0.4 % | ||
| CVE-2024-33602 | 2.15 – < 2.40 | nscd: netgroup cache assumes NSS callback uses in-buffer strings | HIGH 7.4 | 0.4 % | ||
| CVE-2024-33601 | 2.15 – < 2.40 | nscd: netgroup cache may terminate daemon on memory allocation failure | HIGH 7.3 | 1.1 % | ||
| CVE-2024-33600 | 2.15 – < 2.40 | nscd: Null pointer crashes after notfound response | MEDIUM 5.9 | 1.2 % | ||
| CVE-2024-33599 | 2.15 – < 2.40 | nscd: Stack-based buffer overflow in netgroup cache | HIGH 8.1 | 1.3 % | ||
| CVE-2024-2961 | 2.1.93 – < 2.40 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converti | HIGH 7.3 | 88 % |