CVE-2026-57053

Опубликовано: 23 июн. 2026

Источник: nvd

CVSS3: 4

CVSS3: 2.5

EPSS Низкий

Описание

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

Ссылки

https://lists.gnu.org/archive/html/help-libidn/2026-05/msg00000.html
Exploit
Mailing List
https://lists.gnu.org/archive/html/help-libidn/2026-06/msg00001.html
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:libidn:*:*:*:*:*:*:*:*

Версия от 0.1.15 (включая) до 1.44 (исключая)

EPSS

Процентиль: 3%

0.00139

Низкий

4 Medium

CVSS3

2.5 Low

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVE-2026-57053

CVSS3: 2.5

ubuntu

5 месяцев назад

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

CVE-2026-57053

CVSS3: 2.9

redhat

5 месяцев назад

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

CVE-2026-57053

CVSS3: 2.5

debian

5 месяцев назад

GNU libidn before 1.44 is prone to out-of-bounds reads ofuninitialized ...

openSUSE-SU-2026:21758-1

suse-cvrf

2 месяца назад

Security update for libidn

SUSE-SU-2026:4081-1

suse-cvrf

2 месяца назад

Security update for libidn

EPSS

Процентиль: 3%

0.00139

Низкий

4 Medium

CVSS3

2.5 Low

CVSS3

Дефекты

CWE-1284