Out-of-Bounds Read Vulnerability in GNU libidn by GNU

CVE-2026-57053

What is CVE-2026-57053?

GNU libidn versions before 1.44 are susceptible to out-of-bounds read vulnerabilities due to mishandling within the ToUnicode APIs, specifically in the idna_to_unicode_internal function. This flaw permits exploitation that could lead to potential information leakage from uninitialized memory, posing risks to system integrity. The issue is not present in libidn2, thereby emphasizing the importance of upgrading to secure versions.

References