mirror of
git://sourceware.org/git/glibc.git
synced 2026-09-08 23:58:31 +08:00
19 lines
840 B
Plaintext
19 lines
840 B
Plaintext
Buffer overflow in fopen mode argument processing
|
|
|
|
Passing an effectively empty string to the `,ccs=` syntax extension of
|
|
the mode argument in the `fopen` function in the GNU C Library version
|
|
2.45 or earlier may result in a heap buffer overflow when the mode
|
|
string input to the function is attacker controlled.
|
|
|
|
This usage pattern is not seen in applications in common GNU or Linux
|
|
distributions and applications that process user-supplied values for
|
|
`ccs` should not pass them through without validation.
|
|
|
|
CVE-Id: CVE-2026-18374
|
|
Public-Date: 2026-08-27
|
|
Vulnerable-Commit: 129d706d77587e4d6627cc1ebef9be0f7cbc65f0
|
|
Fix-Commit: 9765a538ebf8661a6e5578e01e35a3dd30db7eb4 (2.45)
|
|
Fix-Commit: cca93e5d88d3d4ed073c03100467696f652269e7 (2.45)
|
|
Reported-by: AISLE in partnership with Red Hat
|
|
CVSS: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - 4.9
|