GNU vulnerabilities
139 CVEs and advisories name GNU as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-118384GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c.
- CVE-2026-111167GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder
- CVE-2026-103658GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionar
- CVE-2026-108976GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list
- CVE-2026-75820Integer Truncation Leading to Heap Corruption in GNU Aspell
- CVE-2026-75819Out-of-bounds Read in GNU Aspell
- CVE-2026-75818Heap Buffer Overflow in GNU Aspell's prezip utility
- CVE-2026-97876Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address
- CVE-2026-100310GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX
- CVE-2026-96269GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affect
- CVE-2026-91782GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference
- CVE-2026-91781GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference
- CVE-2026-91780GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
- CVE-2026-91779GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
- CVE-2026-91752GNU libextractor before 1.15 Stack Overflow via OLE2
- CVE-2026-90831GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption
- CVE-2026-90830GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference
- CVE-2026-90829GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference
- CVE-2026-90828GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
- CVE-2026-90804GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
- CVE-2026-90803GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow
- CVE-2026-90802GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference
- CVE-2026-90801GNU Binutils ld cache.c cache_bwrite buffer overflow
- CVE-2026-90622GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference
- CVE-2026-16599Denial of Service in GNU wget
- CVE-2026-77219GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader
- CVE-2026-66486Improper Output Encoding in GNU cpio
- CVE-2026-66485Uncontrolled Memory Allocation in GNU cpio
- CVE-2026-66484Path Traversal in GNU cpio
- CVE-2026-71394Heap Use of Uninitialized Memory in GNU Emacs for Android