This vulnerability in glibc affects versions 2.7 through 2.43 and involves a heap-based buffer overflow triggered by the use of scanf functions with the %mc format specifier combined with an explicit width greater than 1024. The overflow is a one-byte overflow on the heap, which can be exploited remotely without requiring privileges or user interaction. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects the critical nature of this flaw, allowing an attacker to compromise confidentiality, integrity, and availability of affected systems. No official patch or remediation level has been published by the vendor as of the provided data.

Successful exploitation can lead to a heap-based buffer overflow that may allow remote attackers to execute arbitrary code or cause denial of service, severely impacting system confidentiality, integrity, and availability. The vulnerability does not require user interaction or privileges, increasing its risk profile. However, no known exploits have been reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor the GNU C Library vendor advisories for updates. Avoid using the scanf %mc format specifier with explicit widths greater than 1024 in affected glibc versions if possible until a fix is available.