CVE-2026-5435
Out-of-Bounds Write in GNU C Library TSIG Print Functions
Publication date: 2026-04-28
Last updated on: 2026-05-05
Assigner: GNU C Library
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| gnu | glibc | From 2.2 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves deprecated functions in the GNU C Library (version 2.2 and newer) named ns_printrrf, ns_printrr, and fp_nquery. These functions fail to enforce the length of the buffer provided by the caller, which can lead to an out-of-bounds write when printing TSIG records.
How can this vulnerability impact me? :
The vulnerability can cause an out-of-bounds write, which may lead to memory corruption. This can potentially be exploited to cause application crashes, data corruption, or even arbitrary code execution depending on the context in which these functions are used.