PT-2026-69894 · Gnu+1 · Gnu C Library+1
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU C Library versions 2.0 through 2.43
Description
Calling the
wordexp() function with the WRDE APPEND flag can cause the interface to return invalid memory within the we wordv member. This condition may lead to a process abort during subsequent calls to the wordfree() function.Recommendations
Update GNU C Library to a version later than 2.43.
As a temporary mitigation, avoid using the
WRDE APPEND flag when calling the wordexp() function.Exploit
Fix
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gnu C Library
Ubuntu