The vulnerability CVE-2026-5435 in glibc arises from improper bounds checking in deprecated functions ns_printrrf, ns_printrr, and fp_nquery. These functions fail to enforce the length of the buffer supplied by the caller when printing TSIG DNS records, which can cause an out-of-bounds write (CWE-787). This affects glibc versions starting from 2.2. The CVSS v3.1 base score is 7.3, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor.

Successful exploitation of this vulnerability could allow an attacker to cause memory corruption via out-of-bounds writes, potentially leading to denial of service or arbitrary code execution. The impact affects confidentiality, integrity, and availability of affected systems. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the affected functions are deprecated, avoiding their use may reduce exposure. Monitor official GNU C Library advisories for updates on patches or fixes. No official fix or temporary workaround is currently documented.