CVE-2026-57053

Опубликовано: 23 июн. 2026

Источник: nvd

CVSS3: 4

CVSS3: 2.5

EPSS Низкий

Описание

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

Ссылки

https://lists.gnu.org/archive/html/help-libidn/2026-05/msg00000.html
Exploit
Mailing List
https://lists.gnu.org/archive/html/help-libidn/2026-06/msg00001.html
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:libidn:*:*:*:*:*:*:*:*

Версия от 0.1.15 (включая) до 1.44 (исключая)

EPSS

Процентиль: 4%

0.00147

Низкий

4 Medium

CVSS3

2.5 Low

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVE-2026-57053

CVSS3: 4

ubuntu

около 1 месяца назад

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

CVE-2026-57053

CVSS3: 4

debian

около 1 месяца назад

GNU libidn before 1.44 is prone to out-of-bounds reads ofuninitialized ...

GHSA-xpv7-vm32-p7wv

CVSS3: 4

github

около 1 месяца назад

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

EPSS

Процентиль: 4%

0.00147

Низкий

4 Medium

CVSS3

2.5 Low

CVSS3

Дефекты

CWE-1284