Vulnerability Description
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Glibc | >= 2.7, <= 2.43 |
Related Weaknesses (CWE)
References
- https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@Third Party Advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450ExploitIssue Tracking
- https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450ExploitIssue Tracking
FAQ
What is CVE-2026-5450?
CVE-2026-5450 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 coul...
How severe is CVE-2026-5450?
CVE-2026-5450 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-5450?
Check the references section above for vendor advisories and patch information. Affected products include: Gnu Glibc.