CVE-2026-40200
ADVISORY - nistSummary
An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo number on 64-bit platforms, which is not practical).
EPSS Score: 0.00166 (0.062)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Always-Incorrect Control Flow Implementation
Alpine
CREATED
UPDATED
ADVISORY IDCVE-2026-40200
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| alpine/musl | apk | alpine | 3.21 | <1.2.5-r11 | 1.2.5-r11 |
| alpine/musl | apk | alpine | 3.24 | <1.2.6-r2 | 1.2.6-r2 |
| alpine/musl | apk | alpine | 3.22 | <1.2.5-r12 | 1.2.5-r12 |
| alpine/musl | apk | alpine | 3.23 | <1.2.5-r23 | 1.2.5-r23 |
| alpine/musl | apk | alpine | 3.19 | <1.2.4_git20230717-r6 | 1.2.4_git20230717-r6 |
| alpine/musl | apk | alpine | edge | <1.2.6-r2 | 1.2.6-r2 |
| alpine/musl | apk | alpine | 3.20 | <1.2.5-r3 | 1.2.5-r3 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-40200
EXPLOITABILITY SCORE
1.4
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
8.1highDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-40200
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-40200
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-