CVE-2026-5450
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Vulnerability in the GNU C Library (glibc) versions 2.7 through 2.43. Calling scanf family functions with %mc (malloc'd character match) and an explicit width greater than 1024 can cause a one-byte heap buffer overflow.
Risk Assessment
An attacker could exploit this vulnerability to corrupt memory, potentially leading to application crashes or arbitrary code execution.
Recommendation
Upgrade glibc to version 2.44 or later, which includes the fix. If upgrade is not possible, avoid using %mc format with width greater than 1024.
Original NVD description (English source)
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.