Security feed

25 October 2026

advisoryOfficial CVE List25 Oct 2026

CVE-2020-1751

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

glibc CVE-2020-1751

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2020-1751

glibc

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2020-1751
Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event: #21549 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 05:47:23 GMT
Publisher date: Fri, 17 Apr 2020 18:32:44 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2019-1010025

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthread_created thread. The component is: glibc. NOTE: the vendor's position is "ASLR bypass itself is not a vulnerability.

glibc CVE-2019-1010025

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2019-1010025

glibc

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1010025
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #21545 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 05:47:21 GMT
Publisher date: Mon, 15 Jul 2019 03:11:46 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2019-1010024

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

glibc CVE-2019-1010024

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2019-1010024

glibc

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1010024
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #21544 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 05:47:20 GMT
Publisher date: Mon, 15 Jul 2019 03:06:26 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2019-1010023

GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In worst case attacker may evaluate privileges. The component is: libld. The attack vector is: Attacker sends 2 ELF files to victim and asks to run ldd on it. ldd execute code. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

glibc CVE-2019-1010023

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2019-1010023

glibc

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1010023
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #21543 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 05:47:19 GMT
Publisher date: Mon, 15 Jul 2019 03:09:37 GMT

Read the original announcement

advisoryOfficial CVE List25 Oct 2026

CVE-2019-1010022

GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. The component is: nptl. The attack vector is: Exploit stack buffer overflow vulnerability and use this bypass vulnerability to bypass stack guard. NOTE: Upstream comments indicate "this is being treated as a non-security bug and no real threat.

glibc CVE-2019-1010022

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2019-1010022

glibc

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2019-1010022
Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event: #21542 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 05:47:18 GMT
Publisher date: Mon, 15 Jul 2019 03:00:51 GMT

Read the original announcement

24 October 2026

advisoryOfficial CVE List24 Oct 2026

One-byte overread in strncasecmp on Power8

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker controlled in an application and they match all the way up to the edge of their page and the neighbouring page is either not mapped or is not readable.

glibc CVE-2026-97399

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-97399

glibc

Source reference: /containers/cna/affected/0/product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2026-97399
Source reference: /cveMetadata/cveId

Publisher severity

low

Source reference: /containers/cna/metrics

Event: #3240 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:31:41 GMT
Publisher date: Mon, 28 Sep 2026 15:21:02 GMT

Read the original announcement