POSIX wordexp(3) can execute shell commands on untrusted input
musl and macOS libc can still treat some patterns as command substitutions even when WRDE_NOCMD is set.
Stories per day · 30 days
4 stories, newest first · one card per story
Stories tagged #libc
musl libc regcomp integer overflows may cause heap out-of-bounds writes
CVE-2026-107891 covers multiple overflows that can yield wrong allocation sizes; no fix is stated.
musl libc regcomp overflows can cause heap writes (CVE-2026-107891)
Overflow conditions depend on the size and complexity of the regular expression passed to regcomp.
The GNU C Library security advisories update for 2026-09-17
GNU C Library advisory describes a DNS stub resolver assertion failure that aborts processes when search domains reach roughly 200 characters in glibc 2.26-2.44.