Threats Tagged 'cve-2026-5928'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including multiple updated glibc packages for aarch64 and x86_64 architectures. The update addresses various bugs and enhancements related to glibc components. The advisory references CVE-2026-4046 and includes fixes for several CWEs such as CWE-617, CWE-120, CWE-131, CWE-125, and CWE-1284. No known exploits are reported in the wild. The severity is assessed as medium by the vendor.

CVE-2026-5928 is a high-severity buffer under-read vulnerability in the GNU C Library (glibc) versions 2. 43 and earlier. It occurs when the ungetwc function is called on a FILE stream containing wide characters encoded in a character set with overlapping single-byte and multi-byte encodings. This flaw can cause the function to read memory before the allocated buffer, potentially leading to program crashes or unintended disclosure of adjacent heap data. The vulnerability arises from a bug in the wide character pushback implementation, where ungetwc operates on the wrong buffer pointer. This issue requires a specific character encoding scenario and does not affect standard Unicode character sets. No official patch or remediation has been confirmed yet.