Sign In

CVE-2026-6368

ADVISORY - nist

Summary

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

EPSS Score⁠: 0.00107 (0.012)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-908⁠

Use of Uninitialized Resource

ADVISORY - redhat

CWE-1341⁠

Multiple Releases of Same Resource or Handle

Impacted images

Advisories

NIST

CREATED

UPDATED

ADVISORY IDCVE-2026-6368⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-908⁠

CVSS SCORE

2.1low

Debian

CREATED

UPDATED

ADVISORY IDCVE-2026-6368⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

UPDATED

ADVISORY IDCVE-2026-6368⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

UPDATED

ADVISORY IDCVE-2026-6368⁠
EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-1341⁠

CVSS SCORE

5.5medium

minimos

CREATED

UPDATED

ADVISORY ID

MINI-8jj9-cwcg-wpqc

EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM ADVISORY