Heap Buffer Overflow in GNU C Library Affects Multiple Versions

CVE-2026-5450

What is CVE-2026-5450?

The GNU C Library versions 2.7 to 2.43 are susceptible to a heap buffer overflow when the scanf functions are invoked with a %mc format specifier that includes an explicit width exceeding 1024. This condition may potentially result in unintended data modification or corruption by overwriting adjacent memory locations. It is critical for developers and system administrators to validate and sanitize input to mitigate this vulnerability.

References