CVE-2026-18839
LowCVSS 2.2Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
An integer underflow was found in the popt library when formatting help text for option tables wider than the terminal width. A local user who can cause an application to print help under those conditions may cause the application to crash or fail to display help, resulting in a denial of service.
Risk Assessment
An attacker with local access could disrupt applications using the popt library, causing crashes or unavailability of help functionality.
Recommendation
Update the popt library to a patched version and restrict the ability to invoke applications with very wide command-line options.
Original NVD description (English source)
An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.