Vendor
The Gnu C Library
32 known vulnerabilities in products by The Gnu C Library, 0 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-2961 | The GNU C Library Glibc: Out-of-bounds Write | 7.3 | |
| High | CVE-2024-33599 | nscd: Stack-based buffer overflow in netgroup cache | 8.1 | |
| High | CVE-2026-0915 | getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler | 7.5 | |
| High | CVE-2025-15281 | wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory | 7.5 | |
| High | CVE-2026-4046 | iconv crash due to assertion failure with untrusted input | 7.5 | |
| High | CVE-2024-33601 | nscd: netgroup cache may terminate daemon on memory allocation failure | 7.3 | |
| Medium | CVE-2024-33600 | nscd: Null pointer crashes after notfound response | 5.9 | |
| High | CVE-2026-19499 | Buffer overflow in strfmon and strfmon_l right-justification padding | 7.7 | |
| High | CVE-2025-4802 | The GNU C Library Glibc: Untrusted Search Path | 7.8 | |
| Medium | CVE-2026-80489 | EUC_JISX0213 decoding may hang on crafted input | 5.9 | |
| High | CVE-2026-0861 | Integer overflow in memalign leads to heap corruption | 8.4 | |
| Medium | CVE-2026-77117 | SHIFT_JISX0213 decoding may hang on crafted input | 5.9 | |
| High | CVE-2026-5435 | Potential buffer overflow in ns_sprintrrf TSIG handling path | 8.6 | |
| High | CVE-2026-5928 | Potential buffer under-read in ungetwc | 7.5 | |
| Medium | CVE-2026-8674 | Assertion failure in the DNS stub resolver with a long search domain | 5.3 | |
| Medium | CVE-2026-86805 | AT_SECURE programs may load attacker-controlled code via $ORIGIN | 6.3 | |
| Medium | CVE-2026-6791 | Potential stack-based buffer clash during tilde expansion in wordexp | — | |
| Medium | CVE-2026-19542 | Stack-based out-of-bounds write in tdelete during tree rebalancing | 5.6 | |
| Medium | CVE-2025-8058 | The GNU C Library Glibc: Double Free | — | |
| Medium | CVE-2026-6238 | Buffer overread in ns_printrrf with corrupted RDATA field | 6.5 | |
| Medium | CVE-2026-18374 | The GNU C Library Glibc: Out-of-bounds Write | 4.9 | |
| Medium | CVE-2026-89092 | Stack overflow in nscd due to unbounded alloca use | 4.2 | |
| Low | CVE-2026-97399 | One-byte overread in strncasecmp on Power8 | 3.7 | |
| High | CVE-2024-33602 | nscd: netgroup cache assumes NSS callback uses in-buffer strings | 7.4 | |
| High | CVE-2026-4437 | gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response | 5.9 |
Products
| Glibc | 32 | 0 |