GNU vulnerabilities
139 CVEs and advisories name GNU as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-1153GNU Binutils format.c bfd_set_format memory corruption
- CVE-2025-1152GNU Binutils ld xstrdup.c xstrdup memory leak
- CVE-2025-1151GNU Binutils ld xmemdup.c xmemdup memory leak
- CVE-2025-1150GNU Binutils ld libbfd.c bfd_malloc memory leak
- CVE-2025-1149GNU Binutils ld xmalloc.c xstrdup memory leak
- CVE-2025-1148GNU Binutils ld ldelfgen.c link_order_scan memory leak
- CVE-2025-1147GNU Binutils nm nm.c internal_strlen buffer overflow
- CVE-2025-0840GNU Binutils objdump.c disassemble_bytes stack-based overflow
- CVE-2024-56738GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.
- CVE-2024-56737GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
- CVE-2024-10524GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs
- CVE-2023-4039GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64
- CVE-2023-2789GNU cflow parser.c parse_variable_declaration denial of service
- CVE-2023-0687A vulnerability was found in GNU C Library 2.38.
- CVE-2022-2469GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client
- CVE-2015-0837The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timin
- CVE-2014-3591Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proxim
- CVE-2002-2439Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.
- CVE-2019-1010180GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access.