CISCO-SA-20160218-GLIBC

creationtimestamp| type| source ---|---|--- 2026-08-22 14:00:22+00:00| seen| https://t.me/informationsec/693 2026-08-23 00:00:40+00:00| seen| https://t.me/informationsec/693 2026-08-24 00:00:08+00:00| published-proof-of-concept| https://t.me/informationsec/693...

MINI-FHFR-R8P9-JVGQ

Bulletin has no description...

ROOT-OS-DEBIAN-11-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root

Root has patched CVE-2026-5450 in the glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-4806 CVE-2023-4806 in glibc - Patched by Root

Root has patched CVE-2023-4806 in the glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-4813 CVE-2023-4813 in glibc - Patched by Root

Root has patched CVE-2023-4813 in the glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-5928 CVE-2026-5928 in glibc - Patched by Root

Root has patched CVE-2026-5928 in the glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root

Root has patched CVE-2026-5435 in the glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-6238 CVE-2026-6238 in glibc - Patched by Root

Root has patched CVE-2026-6238 in the glibc package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2019-1010022 CVE-2019-1010022 in glibc - Patched by Root

Root has patched CVE-2019-1010022 in the glibc package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-58082 Stack based buffer overflow in iconv(3)

The ISO-2022 encoding module used a stack buffer sized to MBLENMAX 6 bytes for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv3 to...

CVE-2026-58082

This stack buffer overflow in FreeBSD's iconv(3) ISO-2022 encoding module occurs because an intermediate buffer is sized to MB_LEN_MAX (6 bytes) , while some ISO-2022 variants require up to 10 bytes per character , allowing overflow of up to four bytes. Any application using iconv(3) to convert u...

CVE-2026-58081 Heap based buffer overflow in iconv(3)

Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv3 to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer...

MiracleLinux 8 : glibc-2.28-251.el8_10.40 (AXSA:2026-1373:08)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1373:08 advisory. glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings CVE-2026-5928 glibc: glibc:...

SUSE CVE-2026-6368

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

SUSE CVE-2026-6791

When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...

CVE-2026-6368

A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...

CVE-2026-6791

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

GHSA-CH73-G8QV-R6R5 vulnerabilities

Vulnerabilities for packages: glibc...

GHSA-CH73-G8QV-R6R5 vulnerabilities

Vulnerabilities for packages: glibc...

Linux Distros Unpatched Vulnerability : CVE-2026-6368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which o...