CVE-2026-56392

Name of the Vulnerable Software and Affected Versions GNU coreutils (affected versions not specified)

Description The unexpand utility is susceptible to a heap-based buffer overflow caused by an integer overflow during buffer allocation. This occurs when the software processes large values provided via the -t tab stop argument, causing the multiplication used for allocation size to wrap around and create an undersized buffer. Consequently, processing crafted input leads to an out-of-bounds heap write, which can result in a crash or potentially allow a heap write primitive depending on the memory layout.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.