Threats Tagged 'cve-2026-18743'

CVE-2026-18743 is a low severity vulnerability in the popt library related to a short realloc operation in poptconfigfiletostring. This issue affects certain versions of popt used in Microsoft and Red Hat Hardened Images. A security update is available from Red Hat to address this vulnerability.

A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).

A low-impact security flaw exists in the popt library used in Red Hat Hardened Images. The flaw is an off-by-one error in the poptStuffArgs function that can corrupt internal program data when called repeatedly or through deep alias nesting. Exploitation requires a host application to unsafely handle the corrupted data, potentially allowing local code execution. Red Hat has released updated popt RPM packages to address this vulnerability.