GNU vulnerabilities
139 CVEs and advisories name GNU as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-71393Heap Buffer Overflow in GNU Emacs for Android
- CVE-2026-71392Integer Overflow in GNU Emacs for Android
- CVE-2026-71391Off-by-One Error in GNU Emacs for Android
- CVE-2026-56390Arbitrary Output Location Change in GNU Bison
- CVE-2026-56389Arbitrary Command Execution in GNU Bison
- CVE-2026-56392Heap-based Buffer Overflow in GNU coreutils
- CVE-2026-56391Out‑of‑bounds Read in GNU coreutils
- CVE-2026-53910Heap-based Buffer Overflow in GNU diffutils
- CVE-2026-40553Stack-based buffer overflow in gawk
- CVE-2026-40469Heap buffer overflow in gawk
- CVE-2026-40468Heap buffer overflow in gawk
- CVE-2026-40467Use after free in gawk
- CVE-2026-15520GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow
- CVE-2026-15184GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference
- CVE-2026-15182GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow
- CVE-2026-56289Loop with Unreachable Exit Condition in GNU patch
- CVE-2026-56288NULL Pointer Dereference in GNU patch
- CVE-2026-41992Global Buffer Overflow in GNU gzip
- CVE-2026-41991Predictable Temporary File in GNU gzip
- CVE-2026-57053GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unico
- CVE-2026-56968GNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the NTLM client, which could result in memory di
- CVE-2026-56355GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.
- CVE-2026-9605GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow
- CVE-2026-9530GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds
- CVE-2026-9529GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference
- CVE-2026-9504GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds
- CVE-2026-9503GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference
- CVE-2026-9502GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow
- CVE-2026-9501GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion
- CVE-2026-9500GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow