Potential stack-based buffer clash during tilde expansion in wordexp

Buffer overread in ns_printrrf with corrupted RDATA field

AT_SECURE programs may load attacker-controlled code via $ORIGIN

Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems, the client…

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which…

EUC_JISX0213 decoding may hang on crafted input

SHIFT_JISX0213 decoding may hang on crafted input

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails

nscd: Null pointer crashes after notfound response

Stack-based out-of-bounds write in tdelete during tree rebalancing

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the…

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the…

gethostbyaddr and gethostbyaddr_r return invalid DNS hostnames

Assertion failure in the DNS stub resolver with a long search domain

Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap…

Stack overflow in nscd due to unbounded alloca use