# cve.now: THE GNU C Library

The newest entries naming THE GNU C Library as an affected vendor (up to 200), of 34 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-122054](https://cve.now/CVE-2026-122054.md): BIG-HKSCS decoding hang on crafted input (CVSS 5.9)
- [CVE-2026-84243](https://cve.now/CVE-2026-84243.md): gettext: Directory traversal via the LANGUAGE environment variable (CVSS 7.0)
- [CVE-2026-97399](https://cve.now/CVE-2026-97399.md): One-byte overread in strncasecmp on Power8 (CVSS 3.7)
- [CVE-2026-95818](https://cve.now/CVE-2026-95818.md): AT\_SECURE program buffer overflow via $ORIGIN processing (CVSS 3.6)
- [CVE-2026-86805](https://cve.now/CVE-2026-86805.md): AT\_SECURE programs may load attacker-controlled code via $ORIGIN (CVSS 6.3)
- [CVE-2026-8674](https://cve.now/CVE-2026-8674.md): Assertion failure in the DNS stub resolver with a long search domain (CVSS 5.3)
- [CVE-2026-80489](https://cve.now/CVE-2026-80489.md): EUC\_JISX0213 decoding may hang on crafted input (CVSS 5.9)
- [CVE-2026-77117](https://cve.now/CVE-2026-77117.md): SHIFT\_JISX0213 decoding may hang on crafted input (CVSS 5.9)
- [CVE-2026-19542](https://cve.now/CVE-2026-19542.md): Stack-based out-of-bounds write in tdelete during tree rebalancing (CVSS 5.6)
- [CVE-2026-19499](https://cve.now/CVE-2026-19499.md): Buffer overflow in strfmon and strfmon\_l right-justification padding (CVSS 7.7)
- [CVE-2026-89092](https://cve.now/CVE-2026-89092.md): Stack overflow in nscd due to unbounded alloca use (CVSS 4.2)
- [CVE-2026-18374](https://cve.now/CVE-2026-18374.md): Passing an effectively empty string to the \`,ccs=\` syntax extension of the mode argument in the \`fopen\` function in the GNU C Library versio (CVSS 4.9)
- [CVE-2026-6791](https://cve.now/CVE-2026-6791.md): Potential stack-based buffer clash during tilde expansion in wordexp (CVSS 6.6)
- [CVE-2026-6238](https://cve.now/CVE-2026-6238.md): Buffer overread in ns\_printrrf with corrupted RDATA field (CVSS 6.5)
- [CVE-2026-5435](https://cve.now/CVE-2026-5435.md): Potential buffer overflow in ns\_sprintrrf TSIG handling path (CVSS 7.3)
- [CVE-2026-5450](https://cve.now/CVE-2026-5450.md): scanf %mc off-by-one heap buffer overflow (CVSS 9.8)
- [CVE-2026-5928](https://cve.now/CVE-2026-5928.md): Potential buffer under-read in ungetwc (CVSS 7.5)
- [CVE-2026-4046](https://cve.now/CVE-2026-4046.md): iconv crash due to assertion failure with untrusted input (CVSS 7.5)
- [CVE-2026-4438](https://cve.now/CVE-2026-4438.md): gethostbyaddr and gethostbyaddr\_r return invalid DNS hostnames (CVSS 5.4)
- [CVE-2026-4437](https://cve.now/CVE-2026-4437.md): gethostbyaddr and gethostbyaddr\_r may incorrectly handle DNS response (CVSS 7.5)
- [CVE-2026-3904](https://cve.now/CVE-2026-3904.md): Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under h (CVSS 6.2)
- [CVE-2025-15281](https://cve.now/CVE-2025-15281.md): wordexp with WRDE\_REUSE and WRDE\_APPEND may return uninitialized memory (CVSS 7.5)
- [CVE-2026-0915](https://cve.now/CVE-2026-0915.md): getnetbyaddr and getnetbyaddr\_r leak stack contents to DNS resovler (CVSS 7.5)
- [CVE-2026-0861](https://cve.now/CVE-2026-0861.md): Integer overflow in memalign leads to heap corruption (CVSS 8.4)
- [CVE-2025-8058](https://cve.now/CVE-2025-8058.md): The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. (CVSS 5.9)
- [CVE-2025-5745](https://cve.now/CVE-2025-5745.md): The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to (CVSS 5.6)
- [CVE-2025-5702](https://cve.now/CVE-2025-5702.md): The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to (CVSS 5.6)
- [CVE-2025-4802](https://cve.now/CVE-2025-4802.md): Untrusted LD\_LIBRARY\_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of (CVSS 7.8)
- [CVE-2025-0395](https://cve.now/CVE-2025-0395.md): When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure mes (CVSS 6.2)
- [CVE-2024-33602](https://cve.now/CVE-2024-33602.md): nscd: netgroup cache assumes NSS callback uses in-buffer strings (CVSS 7.4)
- [CVE-2024-33601](https://cve.now/CVE-2024-33601.md): nscd: netgroup cache may terminate daemon on memory allocation failure (CVSS 7.3)
- [CVE-2024-33600](https://cve.now/CVE-2024-33600.md): nscd: Null pointer crashes after notfound response (CVSS 5.9)
- [CVE-2024-33599](https://cve.now/CVE-2024-33599.md): nscd: Stack-based buffer overflow in netgroup cache (CVSS 8.1)
- [CVE-2024-2961](https://cve.now/CVE-2024-2961.md): The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when… (CVSS 7.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/the-gnu-c-library
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.