GNU vulnerabilities
139 CVEs and advisories name GNU as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-48829In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanyi
- CVE-2026-1858wget2 Improper Certificate Validation
- CVE-2026-5958Race Condition in GNU Sed
- CVE-2025-69720The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.
- CVE-2026-32772telnet in GNU inetutils through 2.7 allows servers to read arbitrary environment variables from clients via NEW_ENVIRON SEND USERVAR.
- CVE-2026-32746telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because add_
- CVE-2026-28372telnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing systemd service credentials support added
- CVE-2026-24061telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root" value for the USER environment variable.
- CVE-2025-54770Grub2: use-after-free in net_set_vlan
- CVE-2025-61664Grub2: missing unregister call for normal_exit command may lead to use-after-free
- CVE-2025-61663Grub2: missing unregister call for normal commands may lead to use-after-free
- CVE-2025-61662Grub2: missing unregister call for gettext command may lead to use-after-free
- CVE-2025-61661Grub2: grub2: out-of-bounds write via malicious usb device
- CVE-2025-54771Grub2: use-after-free in grub_file_close()
- CVE-2025-11840GNU Binutils ldmisc.c vfinfo out-of-bounds
- CVE-2025-11839GNU Binutils prdbg.c tg_tag_type return value
- CVE-2025-11495GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow
- CVE-2025-11494GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
- CVE-2025-11414GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds
- CVE-2025-11413GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds
- CVE-2025-11412GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds
- CVE-2025-11083GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow
- CVE-2025-11082GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow
- CVE-2025-11081GNU Binutils objdump.c dump_dwarf_section out-of-bounds
- CVE-2025-59378In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular
- CVE-2025-8746GNU libopts __strstr_sse2 memory corruption
- CVE-2025-8736GNU cflow Lexer c.c yylex buffer overflow
- CVE-2025-8735GNU cflow Lexer c.c yylex null pointer dereference
- CVE-2025-8225GNU Binutils DWARF Section dwarf.c process_debug_info memory leak
- CVE-2025-8224GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference