glibc 2.2–2.44 wide scanf writes one byte past buffer
GLIBC-SA-2026-0027 says %s and %[ without the l modifier add an extra null in wide scanf conversions.
55
Product
GNU C Library
- Mentions · 7d1
- Mentions · 30d2
- All mentions4
- First seenSep 10, 2026
- Last mentioned4h ago
Timeline
4 articles · newest firstglibc gettext allows directory traversal via LANGUAGE
The issue affects GNU C Library 2.0 and later, except setuid or setgid programs marked AT_SECURE.
52
The GNU C Library security advisories update for 2026-09-17
GNU C Library advisory describes a DNS stub resolver assertion failure that aborts processes when search domains reach roughly 200 characters in glibc 2.26-2.44.
45
USN-8737-2: GNU C Library vulnerabilities
Ubuntu extends glibc fixes to 24.04 LTS, patching buffer overflow in strfmon and out-of-bounds access in tdelete, both potentially leading to code execution.
26
Related CVEs
by mentions- Buffer overflow in glibc strfmon() width padding affects glibc 2.38–2.44
- Stack Buffer Overflow in GNU C Library (glibc) tdelete on Deep Trees
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.