Threats tagged 'cve-2026-80489'

Multiple security vulnerabilities identified by CWE-1341 and CWE-120 were fixed in the glibc-2.44-1.1 package for openSUSE Tumbleweed and related Red Hat packages. These updates address flaws in the GNU C Library (glibc) to improve security. No known exploits have been reported in the wild. The severity of these issues is assessed as medium. Updated packages are available from SUSE and Red Hat, including language packs and hardened images RPMs.

A security update for the libpcap library addresses an out-of-bounds read and write vulnerability (CVE-2026-0799) that allows arbitrary memory access. This vulnerability affects multiple Red Hat Enterprise Linux 10 and CodeReady Linux Builder products across various architectures. Red Hat has released updated libpcap packages to fix this issue. The vulnerability is rated as important by Red Hat Product Security. No known exploits in the wild have been reported.

CVE-2026-80489 is a medium severity vulnerability in the GNU C Library (glibc) versions 2.3 through 2.44. It involves an infinite loop condition when converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, such as via iconv. The flaw occurs because the converter improperly handles certain two-code-point sequences when the output buffer is too small, causing the application to hang indefinitely. This affects only the EUC_JISX0213 character set, which is uncommon.

A vulnerability in GNU C Library (eglibc) versions 2.3 to 2.44 causes an infinite loop when converting crafted SHIFT_JISX0213 input if the output buffer is too small. This flaw affects the SHIFT_JISX0213 character set, which is not commonly used. A patch is available to fix this issue.

CVE-2026-18374 is a medium severity buffer overflow vulnerability in the GNU C Library (glibc) affecting version 2.45 and earlier. It occurs when an attacker-controlled mode string passed to the fopen function uses the ,ccs= syntax extension with an effectively empty string, potentially causing a heap buffer overflow. This usage pattern is uncommon in typical GNU/Linux applications, and applications should validate user-supplied ccs values before passing them to fopen.