CVE-2026-114111

The sharp image processing library, specifically versions before 0.35.5 , is vulnerable to a memory-related issue (CWE-416: Use After Free) stemming from its bundled librsvg dependency (CVE-2026-96889). Under specific runtime conditions on glibc-based Linux systems, an attacker can provide a craf...

CVE-2026-114111 Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

EUVD-2026-106914

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

CVE-2026-114111

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

CVE-2026-114111 Sharp before 0.35.5 RCE via librsvg Dependency Memory Vulnerability

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

PT-2026-120238

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

PT-2026-120237

sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability CVE-2026-96889 that, under certain runtime-specific conditions, can lead to code execution on glibc-based Linux. An attacker can supply a crafted SVG image that, when decoded by sharp through librsvg, may...

SUSE SLES15: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4591-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4591-1 advisory. - CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. - CVE-2026-679...

CLSA-2026-1791894819 glibc: Fix of 8 CVEs

CVE-2026-6368: posix: make wordexp work on a copy of wewordv when WRDEAPPEND is set and restore the original on non-NOSPACE errors, preventing a use-after-free in wordfree; add tst-wordexp-append regression test - CVE-2026-77117: iconvdata: clear the pending character in the SHIFTJISX0213 decoder...

CLSA-2026-1777481470 glibc: Fix of 7 CVEs

CVE-2021-3326: fix assertion failure in iconv ISO-2022-JP-3 module...

RLSA-2026:84753 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

glibc security update

An update is available for glibc. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librari...

fsop-finder

Glibc FSOP code path finder Find FSOP code path that can hijack control flow and stack pointer in GLIBC Libio. Description: 1. Install this plugin 2. Open libc.so.6 in Binary ninja, then click Tools - Plugins - Find FSOP code path 3. You should see the result in Log windows Useful discoveries: //...

AlmaLinux 8 : glibc (ALSA-2026:80798)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80798 advisory. glibc: Fix out-of-bounds array write in tdelete CVE-2026-19542 glibc: Non-progress DoS in SHIFTJISX0213 - CVE-2026-77117 glibc: Non-progress DoS in...

AlmaLinux 9.2 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791894819)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791894819 advisory. - Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library...

RockyLinux 10 : glibc (RLSA-2026:76781)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76781 advisory. glibc: Process abort due to invalid memory in wordexp CVE-2026-6368 glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791...

Rocky Linux 10.2 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2026_76781)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202676781 advisory. glibc: Process abort due to invalid memory in wordexp CVE-2026-6368 glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-6791...

glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

A flaw was found in the GNU C Library glibc. This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the fopen function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive...

glibc: glibc DNS stub resolver: Denial of Service via long search domain in configuration

A flaw was found in the GNU C Library glibc DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...