Threats Tagged 'cve-2026-5450'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including multiple updated glibc packages for aarch64 and x86_64 architectures. The update addresses various bugs and enhancements related to glibc components. The advisory references CVE-2026-4046 and includes fixes for several CWEs such as CWE-617, CWE-120, CWE-131, CWE-125, and CWE-1284. No known exploits are reported in the wild. The severity is assessed as medium by the vendor.

CVE-2026-5450 is a critical heap-based buffer overflow vulnerability in the GNU C Library (glibc) versions 2. 7 through 2. 43. It occurs when using the scanf family of functions with the %mc format specifier and an explicit width greater than 1024, causing a one-byte overflow on the heap. The vulnerability has a CVSS score of 9. 8, indicating it can be exploited remotely without privileges or user interaction, impacting confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.