Wind River Support Network

HomeDefectsLIN1025-9157

Fixed

LIN1025-9157 : Security Advisory - glibc - CVE-2026-5450

Created: Apr 21, 2026 Updated: Jun 4, 2026

Resolved Date: Jun 4, 2026

Found In Version: 10.25.33.2

Fix Version: 10.25.33.10

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

CVEs

CVE-2026-5450