# cve.now: GNU

The newest entries naming GNU as an affected vendor (up to 200), of 139 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-118384](https://cve.now/CVE-2026-118384.md): GNU mtools before 4.0.50 has an out-of-bounds write in parse\_vses in vfat.c. (CVSS 6.1)
- [CVE-2026-111167](https://cve.now/CVE-2026-111167.md): GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds\_private AcDs Decoder (CVSS 6.9)
- [CVE-2026-103658](https://cve.now/CVE-2026-103658.md): GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionar (CVSS 5.9)
- [CVE-2026-108976](https://cve.now/CVE-2026-108976.md): GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list (CVSS 7.8)
- [CVE-2026-75820](https://cve.now/CVE-2026-75820.md): Integer Truncation Leading to Heap Corruption in GNU Aspell (CVSS 1.8)
- [CVE-2026-75819](https://cve.now/CVE-2026-75819.md): Out-of-bounds Read in GNU Aspell (CVSS 1.8)
- [CVE-2026-75818](https://cve.now/CVE-2026-75818.md): Heap Buffer Overflow in GNU Aspell's prezip utility (CVSS 1.8)
- [CVE-2026-97876](https://cve.now/CVE-2026-97876.md): Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address (CVSS 6.4)
- [CVE-2026-100310](https://cve.now/CVE-2026-100310.md): GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR\_PREFIX (CVSS 7.3)
- [CVE-2026-96269](https://cve.now/CVE-2026-96269.md): GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affect (CVSS 7.5)
- [CVE-2026-91782](https://cve.now/CVE-2026-91782.md): GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf\_x86\_allocate\_dynrelocs null pointer dereference (CVSS 4.8)
- [CVE-2026-91781](https://cve.now/CVE-2026-91781.md): GNU Binutils ELF Section elf64-x86-64.c elf\_x86\_64\_common\_section\_index null pointer dereference (CVSS 4.8)
- [CVE-2026-91780](https://cve.now/CVE-2026-91780.md): GNU Binutils elflink.c elf\_link\_add\_object\_symbols null pointer dereference (CVSS 4.8)
- [CVE-2026-91779](https://cve.now/CVE-2026-91779.md): GNU Binutils Eh Frame elf-eh-frame.c \_bfd\_elf\_eh\_frame\_section\_offset null pointer dereference (CVSS 4.8)
- [CVE-2026-91752](https://cve.now/CVE-2026-91752.md): GNU libextractor before 1.15 Stack Overflow via OLE2 (CVSS 8.7)
- [CVE-2026-90831](https://cve.now/CVE-2026-90831.md): GNU Binutils ELF String Table elf-strtab.c \_bfd\_elf\_strtab\_delref memory corruption (CVSS 4.8)
- [CVE-2026-90830](https://cve.now/CVE-2026-90830.md): GNU Binutils Section Merge merge.c \_bfd\_write\_merged\_section null pointer dereference (CVSS 4.8)
- [CVE-2026-90829](https://cve.now/CVE-2026-90829.md): GNU Binutils SHT\_GROUP Section elf.c bfd\_elf\_set\_group\_contents null pointer dereference (CVSS 4.8)
- [CVE-2026-90828](https://cve.now/CVE-2026-90828.md): GNU Binutils ELF Orphan Section ldelf.c elf\_orphan\_compatible null pointer dereference (CVSS 4.8)
- [CVE-2026-90804](https://cve.now/CVE-2026-90804.md): GNU Binutils Eh Frame Section elf-eh-frame.c \_bfd\_elf\_write\_section\_eh\_frame buffer overflow (CVSS 2.4)
- [CVE-2026-90803](https://cve.now/CVE-2026-90803.md): GNU Binutils ld elf64-x86-64.c elf\_x86\_64\_relocate\_section buffer overflow (CVSS 4.8)
- [CVE-2026-90802](https://cve.now/CVE-2026-90802.md): GNU Binutils ld libbfd.c bfd\_putl64 null pointer dereference (CVSS 4.8)
- [CVE-2026-90801](https://cve.now/CVE-2026-90801.md): GNU Binutils ld cache.c cache\_bwrite buffer overflow (CVSS 4.8)
- [CVE-2026-90622](https://cve.now/CVE-2026-90622.md): GNU libredwg Layer Encoding dwg.spec DWG\_TABLE null pointer dereference (CVSS 4.8)
- [CVE-2026-16599](https://cve.now/CVE-2026-16599.md): Denial of Service in GNU wget (CVSS 5.1)
- [CVE-2026-77219](https://cve.now/CVE-2026-77219.md): GNU Emacs \< 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader (CVSS 6.9)
- [CVE-2026-66486](https://cve.now/CVE-2026-66486.md): Improper Output Encoding in GNU cpio (CVSS 4.6)
- [CVE-2026-66485](https://cve.now/CVE-2026-66485.md): Uncontrolled Memory Allocation in GNU cpio (CVSS 4.6)
- [CVE-2026-66484](https://cve.now/CVE-2026-66484.md): Path Traversal in GNU cpio (CVSS 4.6)
- [CVE-2026-71394](https://cve.now/CVE-2026-71394.md): Heap Use of Uninitialized Memory in GNU Emacs for Android (CVSS 5.3)
- [CVE-2026-71393](https://cve.now/CVE-2026-71393.md): Heap Buffer Overflow in GNU Emacs for Android (CVSS 5.3)
- [CVE-2026-71392](https://cve.now/CVE-2026-71392.md): Integer Overflow in GNU Emacs for Android (CVSS 5.3)
- [CVE-2026-71391](https://cve.now/CVE-2026-71391.md): Off-by-One Error in GNU Emacs for Android (CVSS 5.3)
- [CVE-2026-56390](https://cve.now/CVE-2026-56390.md): Arbitrary Output Location Change in GNU Bison (CVSS 4.6)
- [CVE-2026-56389](https://cve.now/CVE-2026-56389.md): Arbitrary Command Execution in GNU Bison (CVSS 6.8)
- [CVE-2026-56392](https://cve.now/CVE-2026-56392.md): Heap-based Buffer Overflow in GNU coreutils (CVSS 1.8)
- [CVE-2026-56391](https://cve.now/CVE-2026-56391.md): Out‑of‑bounds Read in GNU coreutils (CVSS 4.6)
- [CVE-2026-53910](https://cve.now/CVE-2026-53910.md): Heap-based Buffer Overflow in GNU diffutils (CVSS 2.1)
- [CVE-2026-40553](https://cve.now/CVE-2026-40553.md): Stack-based buffer overflow in gawk (CVSS 5.1)
- [CVE-2026-40469](https://cve.now/CVE-2026-40469.md): Heap buffer overflow in gawk (CVSS 5.1)
- [CVE-2026-40468](https://cve.now/CVE-2026-40468.md): Heap buffer overflow in gawk (CVSS 2.1)
- [CVE-2026-40467](https://cve.now/CVE-2026-40467.md): Use after free in gawk (CVSS 5.1)
- [CVE-2026-15520](https://cve.now/CVE-2026-15520.md): GNU LibreDWG R2004 Section Decompression decode.c decompress\_R2004\_section heap-based overflow (CVSS 4.8)
- [CVE-2026-15184](https://cve.now/CVE-2026-15184.md): GNU LibreDWG DWG File dwg.c dwg\_next\_entity null pointer dereference (CVSS 4.8)
- [CVE-2026-15182](https://cve.now/CVE-2026-15182.md): GNU LibreDWG BMP Image dwg.c dwg\_bmp heap-based overflow (CVSS 4.8)
- [CVE-2026-56289](https://cve.now/CVE-2026-56289.md): Loop with Unreachable Exit Condition in GNU patch (CVSS 4.6)
- [CVE-2026-56288](https://cve.now/CVE-2026-56288.md): NULL Pointer Dereference in GNU patch (CVSS 4.6)
- [CVE-2026-41992](https://cve.now/CVE-2026-41992.md): Global Buffer Overflow in GNU gzip (CVSS 6.9)
- [CVE-2026-41991](https://cve.now/CVE-2026-41991.md): Predictable Temporary File in GNU gzip (CVSS 2.0)
- [CVE-2026-57053](https://cve.now/CVE-2026-57053.md): GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna\_to\_unico (CVSS 4.0)
- [CVE-2026-56968](https://cve.now/CVE-2026-56968.md): GNU SASL before 2.2.4 lacks sanitization of a short challenge in \_gsasl\_ntlm\_client\_step in the NTLM client, which could result in memory di (CVSS 3.7)
- [CVE-2026-56355](https://cve.now/CVE-2026-56355.md): GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization. (CVSS 3.7)
- [CVE-2026-9605](https://cve.now/CVE-2026-9605.md): GNU libredwg Dwgbmp Utility bits.c bit\_read\_RC heap-based overflow (CVSS 6.9)
- [CVE-2026-9530](https://cve.now/CVE-2026-9530.md): GNU LibreDWG Dwgbmp Utility decode.c read\_2004\_compressed\_section out-of-bounds (CVSS 4.8)
- [CVE-2026-9529](https://cve.now/CVE-2026-9529.md): GNU LibreDWG Dwggrep Utility dwggrep.c match\_BLOCK\_HEADER null pointer dereference (CVSS 4.8)
- [CVE-2026-9504](https://cve.now/CVE-2026-9504.md): GNU LibreDWG Dwggrep Utility dwggrep.c bit\_convert\_TU out-of-bounds (CVSS 4.8)
- [CVE-2026-9503](https://cve.now/CVE-2026-9503.md): GNU LibreDWG DWG File decode.c dwg\_next\_entity null pointer dereference (CVSS 4.8)
- [CVE-2026-9502](https://cve.now/CVE-2026-9502.md): GNU LibreDWG Dwgread Utility decode.c decompress\_R2004\_section heap-based overflow (CVSS 4.8)
- [CVE-2026-9501](https://cve.now/CVE-2026-9501.md): GNU LibreDWG Dwgread Utility decode.c decompress\_R2004\_section assertion (CVSS 4.8)
- [CVE-2026-9500](https://cve.now/CVE-2026-9500.md): GNU LibreDWG Dwgread Utility decode.c read\_2004\_compressed\_section heap-based overflow (CVSS 4.8)
- [CVE-2026-48829](https://cve.now/CVE-2026-48829.md): In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanyi (CVSS 7.5)
- [CVE-2026-1858](https://cve.now/CVE-2026-1858.md): wget2 Improper Certificate Validation (CVSS 4.8)
- [CVE-2026-5958](https://cve.now/CVE-2026-5958.md): Race Condition in GNU Sed (CVSS 2.1)
- [CVE-2025-69720](https://cve.now/CVE-2025-69720.md): The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze\_string in progs/infocmp.c. (CVSS 7.3)
- [CVE-2026-32772](https://cve.now/CVE-2026-32772.md): telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW\_ENVIRON SEND USERVAR. (CVSS 3.4)
- [CVE-2026-32746](https://cve.now/CVE-2026-32746.md): telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add\_ (CVSS 9.8)
- [CVE-2026-28372](https://cve.now/CVE-2026-28372.md): telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added (CVSS 7.4)
- [CVE-2026-24061](https://cve.now/CVE-2026-24061.md): telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable. (CVSS 9.8, KEV)
- [CVE-2025-54770](https://cve.now/CVE-2025-54770.md): Grub2: use-after-free in net\_set\_vlan (CVSS 4.9)
- [CVE-2025-61664](https://cve.now/CVE-2025-61664.md): Grub2: missing unregister call for normal\_exit command may lead to use-after-free (CVSS 4.9)
- [CVE-2025-61663](https://cve.now/CVE-2025-61663.md): Grub2: missing unregister call for normal commands may lead to use-after-free (CVSS 4.9)
- [CVE-2025-61662](https://cve.now/CVE-2025-61662.md): Grub2: missing unregister call for gettext command may lead to use-after-free (CVSS 7.8)
- [CVE-2025-61661](https://cve.now/CVE-2025-61661.md): Grub2: grub2: out-of-bounds write via malicious usb device (CVSS 4.8)
- [CVE-2025-54771](https://cve.now/CVE-2025-54771.md): Grub2: use-after-free in grub\_file\_close() (CVSS 4.9)
- [CVE-2025-11840](https://cve.now/CVE-2025-11840.md): GNU Binutils ldmisc.c vfinfo out-of-bounds (CVSS 4.8)
- [CVE-2025-11839](https://cve.now/CVE-2025-11839.md): GNU Binutils prdbg.c tg\_tag\_type return value (CVSS 4.8)
- [CVE-2025-11495](https://cve.now/CVE-2025-11495.md): GNU Binutils Linker elf64-x86-64.c elf\_x86\_64\_relocate\_section heap-based overflow (CVSS 4.8)
- [CVE-2025-11494](https://cve.now/CVE-2025-11494.md): GNU Binutils Linker elfxx-x86.c \_bfd\_x86\_elf\_late\_size\_sections out-of-bounds (CVSS 4.8)
- [CVE-2025-11414](https://cve.now/CVE-2025-11414.md): GNU Binutils Linker elflink.c get\_link\_hash\_entry out-of-bounds (CVSS 4.8)
- [CVE-2025-11413](https://cve.now/CVE-2025-11413.md): GNU Binutils Linker elflink.c elf\_link\_add\_object\_symbols out-of-bounds (CVSS 4.8)
- [CVE-2025-11412](https://cve.now/CVE-2025-11412.md): GNU Binutils Linker elflink.c bfd\_elf\_gc\_record\_vtentry out-of-bounds (CVSS 4.8)
- [CVE-2025-11083](https://cve.now/CVE-2025-11083.md): GNU Binutils Linker elfcode.h elf\_swap\_shdr heap-based overflow (CVSS 4.8)
- [CVE-2025-11082](https://cve.now/CVE-2025-11082.md): GNU Binutils Linker elf-eh-frame.c \_bfd\_elf\_parse\_eh\_frame heap-based overflow (CVSS 4.8)
- [CVE-2025-11081](https://cve.now/CVE-2025-11081.md): GNU Binutils objdump.c dump\_dwarf\_section out-of-bounds (CVSS 4.8)
- [CVE-2025-59378](https://cve.now/CVE-2025-59378.md): In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular (CVSS 5.7)
- [CVE-2025-8746](https://cve.now/CVE-2025-8746.md): GNU libopts \_\_strstr\_sse2 memory corruption (CVSS 4.8)
- [CVE-2025-8736](https://cve.now/CVE-2025-8736.md): GNU cflow Lexer c.c yylex buffer overflow (CVSS 4.8)
- [CVE-2025-8735](https://cve.now/CVE-2025-8735.md): GNU cflow Lexer c.c yylex null pointer dereference (CVSS 4.8)
- [CVE-2025-8225](https://cve.now/CVE-2025-8225.md): GNU Binutils DWARF Section dwarf.c process\_debug\_info memory leak (CVSS 4.8)
- [CVE-2025-8224](https://cve.now/CVE-2025-8224.md): GNU Binutils BFD Library elf.c bfd\_elf\_get\_str\_section null pointer dereference (CVSS 4.8)
- [CVE-2025-7546](https://cve.now/CVE-2025-7546.md): GNU Binutils elf.c bfd\_elf\_set\_group\_contents out-of-bounds write (CVSS 4.8)
- [CVE-2025-7545](https://cve.now/CVE-2025-7545.md): GNU Binutils objcopy.c copy\_section heap-based overflow (CVSS 4.8)
- [CVE-2025-45582](https://cve.now/CVE-2025-45582.md): GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. (CVSS 4.1)
- [CVE-2025-6141](https://cve.now/CVE-2025-6141.md): GNU ncurses parse\_entry.c postprocess\_termcap stack-based overflow (CVSS 4.8)
- [CVE-2025-5899](https://cve.now/CVE-2025-5899.md): GNU PSPP pspp-convert.c parse\_variables\_option free of memory not on the heap (CVSS 4.8)
- [CVE-2025-5898](https://cve.now/CVE-2025-5898.md): GNU PSPP pspp-convert.c parse\_variables\_option out-of-bounds write (CVSS 4.8)
- [CVE-2025-5245](https://cve.now/CVE-2025-5245.md): GNU Binutils objdump debug.c debug\_type\_samep memory corruption (CVSS 4.8)
- [CVE-2025-5244](https://cve.now/CVE-2025-5244.md): GNU Binutils ld elflink.c elf\_gc\_sweep memory corruption (CVSS 4.8)
- [CVE-2025-5001](https://cve.now/CVE-2025-5001.md): GNU PSPP pspp-convert.c calloc integer overflow (CVSS 4.8)
- [CVE-2025-48188](https://cve.now/CVE-2025-48188.md): libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill\_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt fun (CVSS 2.9)
- [CVE-2025-47816](https://cve.now/CVE-2025-47816.md): libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml\_parse\_attributes out-of-bounds read, related t (CVSS 2.9)
- [CVE-2025-47815](https://cve.now/CVE-2025-47815.md): libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate\_read (called indirectly from zip\_ (CVSS 4.5)
- [CVE-2025-47814](https://cve.now/CVE-2025-47814.md): libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate\_read (called indirectly from spv\_ (CVSS 4.5)
- [CVE-2025-47229](https://cve.now/CVE-2025-47229.md): libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var\_set\_leave\_quiet assertion failure and applicatio (CVSS 2.9)
- [CVE-2025-43921](https://cve.now/CVE-2025-43921.md): GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint. (CVSS 5.3)
- [CVE-2025-43920](https://cve.now/CVE-2025-43920.md): GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute (CVSS 5.4)
- [CVE-2025-43919](https://cve.now/CVE-2025-43919.md): GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at (CVSS 5.8)
- [CVE-2025-3198](https://cve.now/CVE-2025-3198.md): GNU Binutils objdump bucomm.c display\_info memory leak (CVSS 4.8)
- [CVE-2025-1377](https://cve.now/CVE-2025-1377.md): GNU elfutils eu-strip strip.c gelf\_getsymshndx denial of service (CVSS 4.8)
- [CVE-2025-1376](https://cve.now/CVE-2025-1376.md): GNU elfutils eu-strip elf\_strptr.c elf\_strptr denial of service (CVSS 2.0)
- [CVE-2025-1372](https://cve.now/CVE-2025-1372.md): GNU elfutils eu-readelf readelf.c print\_string\_section buffer overflow (CVSS 4.8)
- [CVE-2025-1371](https://cve.now/CVE-2025-1371.md): GNU elfutils eu-read readelf.c handle\_dynamic\_symtab null pointer dereference (CVSS 4.8)
- [CVE-2025-1365](https://cve.now/CVE-2025-1365.md): GNU elfutils eu-readelf readelf.c process\_symtab buffer overflow (CVSS 4.8)
- [CVE-2025-1352](https://cve.now/CVE-2025-1352.md): GNU elfutils eu-readelf libdw\_alloc.c \_\_libdw\_thread\_tail memory corruption (CVSS 2.3)
- [CVE-2025-1182](https://cve.now/CVE-2025-1182.md): GNU Binutils ld elflink.c bfd\_elf\_reloc\_symbol\_deleted\_p memory corruption (CVSS 2.3)
- [CVE-2025-1181](https://cve.now/CVE-2025-1181.md): GNU Binutils ld elflink.c \_bfd\_elf\_gc\_mark\_rsec memory corruption (CVSS 2.3)
- [CVE-2025-1180](https://cve.now/CVE-2025-1180.md): GNU Binutils ld elf-eh-frame.c \_bfd\_elf\_write\_section\_eh\_frame memory corruption (CVSS 2.3)
- [CVE-2025-1179](https://cve.now/CVE-2025-1179.md): GNU Binutils ld libbfd.c bfd\_putl64 memory corruption (CVSS 2.3)
- [CVE-2025-1178](https://cve.now/CVE-2025-1178.md): GNU Binutils ld libbfd.c bfd\_putl64 memory corruption (CVSS 6.3)
- [CVE-2025-1176](https://cve.now/CVE-2025-1176.md): GNU Binutils ld elflink.c \_bfd\_elf\_gc\_mark\_rsec heap-based overflow (CVSS 2.3)
- [CVE-2025-1153](https://cve.now/CVE-2025-1153.md): GNU Binutils format.c bfd\_set\_format memory corruption (CVSS 2.3)
- [CVE-2025-1152](https://cve.now/CVE-2025-1152.md): GNU Binutils ld xstrdup.c xstrdup memory leak (CVSS 2.3)
- [CVE-2025-1151](https://cve.now/CVE-2025-1151.md): GNU Binutils ld xmemdup.c xmemdup memory leak (CVSS 2.3)
- [CVE-2025-1150](https://cve.now/CVE-2025-1150.md): GNU Binutils ld libbfd.c bfd\_malloc memory leak (CVSS 2.3)
- [CVE-2025-1149](https://cve.now/CVE-2025-1149.md): GNU Binutils ld xmalloc.c xstrdup memory leak (CVSS 2.3)
- [CVE-2025-1148](https://cve.now/CVE-2025-1148.md): GNU Binutils ld ldelfgen.c link\_order\_scan memory leak (CVSS 2.3)
- [CVE-2025-1147](https://cve.now/CVE-2025-1147.md): GNU Binutils nm nm.c internal\_strlen buffer overflow (CVSS 2.3)
- [CVE-2025-0840](https://cve.now/CVE-2025-0840.md): GNU Binutils objdump.c disassemble\_bytes stack-based overflow (CVSS 6.3)
- [CVE-2024-56738](https://cve.now/CVE-2024-56738.md): GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub\_crypto\_memcmp and thus allows side-channel attacks. (CVSS 5.3)
- [CVE-2024-56737](https://cve.now/CVE-2024-56737.md): GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem. (CVSS 8.8)
- [CVE-2024-10524](https://cve.now/CVE-2024-10524.md): GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs (CVSS 6.5)
- [CVE-2023-4039](https://cve.now/CVE-2023-4039.md): GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 (CVSS 4.8)
- [CVE-2023-2789](https://cve.now/CVE-2023-2789.md): GNU cflow parser.c parse\_variable\_declaration denial of service (CVSS 3.5)
- [CVE-2023-0687](https://cve.now/CVE-2023-0687.md): A vulnerability was found in GNU C Library 2.38. (CVSS 4.6)
- [CVE-2022-2469](https://cve.now/CVE-2022-2469.md): GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client (CVSS 3.8)
- [CVE-2015-0837](https://cve.now/CVE-2015-0837.md): The mpi\_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timin (no CVSS)
- [CVE-2014-3591](https://cve.now/CVE-2014-3591.md): Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proxim (no CVSS)
- [CVE-2002-2439](https://cve.now/CVE-2002-2439.md): Integer overflow in the new\[\] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. (no CVSS)
- [CVE-2019-1010180](https://cve.now/CVE-2019-1010180.md): GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gnu
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.