A vulnerability in the GNU C Library (glibc) affects the gettext family of functions when processing the LANGUAGE environment variable. This flaw allows an attacker who can control LANGUAGE to cause the program to load message catalogs from arbitrary file system locations. Crafted message catalogs can crash the program or cause undefined behavior in printf-like functions, potentially leading to arbitrary code execution with the program's privileges. The issue arises because the fix for a previous similar vulnerability did not cover the LANGUAGE variable. Exploitation requires the attacker to influence locale selection and place malicious files in readable locations without the program running with AT_SECURE privileges. Affected versions are prior to 2.38-131.oe2403sp1, which includes the fix.