Search: CVE-2026-95818

CVE-2026-95818 is a stack-based buffer overflow vulnerability in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44. This flaw affects setuid/setgid programs that use DT_RPATH or DT_RUNPATH beginning with $ORIGIN followed by a NUL or '/' character. Exploitation can cause the loader to read and write beyond the bounds of internal buffers, leading to crashes or limited disclosure of process memory. The vulnerability has a low CVSS score of 3.6 and requires local attacker privileges with high attack complexity.