CVE-2026-18739

Name of the Vulnerable Software and Affected Versions popt (affected versions not specified)

Description An off-by-one error exists in the poptStuffArgs() function of the popt command-line option parsing library. This issue occurs when the function is repeatedly called by a host application or through deep alias nesting, leading to the corruption of internal program data. A local attacker could potentially execute arbitrary code if the host application unsafely processes the corrupted data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.