Product by Ubuntu
Glibc
13 known vulnerabilities in Glibc (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-4046 | iconv crash due to assertion failure with untrusted input | 7.5 | |
| High | CVE-2026-19499 | Buffer overflow in strfmon and strfmon_l right-justification padding | 7.7 | |
| Medium | CVE-2026-80489 | EUC_JISX0213 decoding may hang on crafted input | 5.9 | |
| Medium | CVE-2026-77117 | SHIFT_JISX0213 decoding may hang on crafted input | 5.9 | |
| High | CVE-2026-5435 | Potential buffer overflow in ns_sprintrrf TSIG handling path | 8.6 | |
| High | CVE-2026-5928 | Potential buffer under-read in ungetwc | 7.5 | |
| Medium | CVE-2026-6791 | Potential stack-based buffer clash during tilde expansion in wordexp | — | |
| Medium | CVE-2026-19542 | Stack-based out-of-bounds write in tdelete during tree rebalancing | 5.6 | |
| Medium | CVE-2026-6238 | Buffer overread in ns_printrrf with corrupted RDATA field | 6.5 | |
| High | CVE-2026-4437 | gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response | 5.9 | |
| Medium | CVE-2026-4438 | gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames | 5.9 | |
| Critical | CVE-2026-5450 | scanf %mc off-by-one heap buffer overflow | 3.1 | |
| Low | CVE-2026-6368 | wordexp with WRDE_APPEND can return or use invalid memory | — |