CVE-2026-6368
ADVISORY - nistSummary
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
EPSS Score: 0.00107 (0.013)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Use of Uninitialized Resource
ADVISORY - redhat
Multiple Releases of Same Resource or Handle
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-6368
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
2.1lowDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-6368
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Red Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-6368
EXPLOITABILITY SCORE
1.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)