CVE-2026-5450 - Vulnerability Analysis

Overview

GNU C Library 2.7 to 2.43 contains a heap buffer overflow caused by using %mc with a format width specifier greater than 1024 in scanf functions, letting attackers cause memory corruption, exploit requires crafted input.

Severity & Score

Impact

Attackers can cause a heap buffer overflow leading to potential memory corruption or code execution.

Mitigation

Update to the latest version of GNU C Library.

References

• https://inbox.sourceware.org/libc-announce/[email protected]/T/#u
• https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450

Social Media Activity(1 post)

Vito Botta

@vitobotta

Apr 28, 2026

Three glibc CVEs, including CVSS 9.8 heap overflow in scanf (CVE-2026-5450). Affects glibc 2.7 through 2.43, that's decades of releases. When the C library has bugs, everything on Linux has bugs. Patch.

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner