Vulnerability Details CVE-2026-5450
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 11.2%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-5450
-
-
cpe:2.3:a:gnu:glibc:2.10.1
-
cpe:2.3:a:gnu:glibc:2.10.2
-
-
cpe:2.3:a:gnu:glibc:2.11.1
-
cpe:2.3:a:gnu:glibc:2.11.2
-
cpe:2.3:a:gnu:glibc:2.11.3
-
-
cpe:2.3:a:gnu:glibc:2.12.0
-
cpe:2.3:a:gnu:glibc:2.12.1
-
cpe:2.3:a:gnu:glibc:2.12.2
-
-
-
cpe:2.3:a:gnu:glibc:2.14.1
-
cpe:2.3:a:gnu:glibc:2.14.9000
-
-
-
cpe:2.3:a:gnu:glibc:2.16.0
-
cpe:2.3:a:gnu:glibc:2.16.90
-
-
cpe:2.3:a:gnu:glibc:2.17.90
-
-
cpe:2.3:a:gnu:glibc:2.18.90
-
-
cpe:2.3:a:gnu:glibc:2.19.90
-
-
cpe:2.3:a:gnu:glibc:2.20.90
-
-
cpe:2.3:a:gnu:glibc:2.21.90
-
-
cpe:2.3:a:gnu:glibc:2.22.90
-
-
cpe:2.3:a:gnu:glibc:2.23.90
-
-
cpe:2.3:a:gnu:glibc:2.24.90
-
-
cpe:2.3:a:gnu:glibc:2.25.90
-
-
cpe:2.3:a:gnu:glibc:2.26.9000
-
-
cpe:2.3:a:gnu:glibc:2.27.9000
-
-
cpe:2.3:a:gnu:glibc:2.28.9000
-
-
cpe:2.3:a:gnu:glibc:2.29.9000
-
-
cpe:2.3:a:gnu:glibc:2.30.9000
-
-
cpe:2.3:a:gnu:glibc:2.31.9000
-
-
cpe:2.3:a:gnu:glibc:2.32.0
-
cpe:2.3:a:gnu:glibc:2.32.9000
-
-
cpe:2.3:a:gnu:glibc:2.33.9000
-
-
cpe:2.3:a:gnu:glibc:2.34.9000
-
-
cpe:2.3:a:gnu:glibc:2.35.9000
-
-
cpe:2.3:a:gnu:glibc:2.36.113
-
cpe:2.3:a:gnu:glibc:2.36.9000
-
-
cpe:2.3:a:gnu:glibc:2.37.38
-
cpe:2.3:a:gnu:glibc:2.37.9000
-
-
cpe:2.3:a:gnu:glibc:2.38.19
-
cpe:2.3:a:gnu:glibc:2.38.9000
-
-
cpe:2.3:a:gnu:glibc:2.39.9000
-
-
cpe:2.3:a:gnu:glibc:2.40.9000
-
-
cpe:2.3:a:gnu:glibc:2.41.9000
-
-
-