Threats Tagged 'cve-2026-5450'

The glibc packages provide the standard C libraries (libc), POSIX thread libraries (libpthread), standard math libraries (libm), and the name service cache daemon (nscd) used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fix(es): * glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width (CVE-2026-5450) Bug Fix(es) and Enhancement(s): * Backport Zen5 IFUNC changes to prefer AVX512/EVEX?512 string implementations on RHEL 10 [rhel-10] (JIRA:RHEL-174869) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2025-5278 is a medium severity vulnerability in GNU Coreutils affecting the sort utility. The flaw is a heap buffer under-read in the begfield() function triggered by crafted input using the traditional key format. This can cause the program to access memory outside the allocated buffer, potentially leading to a crash or leakage of sensitive data. Red Hat has released security updates for Red Hat Enterprise Linux versions 9 and 10 to address this issue.