AZL-74819 CVE-2025-15281 affecting package glibc for versions less than 2.38-18

Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

UBUNTU-CVE-2025-15281

Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

CVE-2025-15281

The GNU C Library (glibc) versions 2.0 to 2.42 are vulnerable to a memory management flaw in the wordexp() function. Specifically, using the WRDE_REUSE flag in conjunction with WRDE_APPEND can cause the interface to return uninitialized memory in the we_wordv member. This condition may lead to a ...