Description (CNA)
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The GNU C Library / glibc | affected 2.7 before * |
CWE
CWE-122
References
- https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450
- https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u
ADP enrichment
No English description supplied.
No English description supplied.