Out-of-Bounds Write in GNU C Library Affects Multiple Versions

CVE-2026-5435

What is CVE-2026-5435?

A significant vulnerability exists in the GNU C Library (glibc) due to the failure of deprecated functions such as ns_printrrf, ns_printrr, and fp_nquery to properly enforce caller-supplied buffer lengths when printing TSIG records. This oversight can lead to out-of-bounds writes, potentially allowing attackers to corrupt memory, leading to undefined behavior, crashes, or further exploitation of the system. It is crucial for users of affected glibc versions to address this vulnerability promptly to maintain system integrity and security.

References