Bug 2459853 (CVE-2026-5450) - CVE-2026-5450 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
Summary: CVE-2026-5450 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format...
Keywords:
Status: NEW
Alias: CVE-2026-5450
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2464554
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-04-20 21:01 UTC by OSIDB Bzimport
Modified: 2026-07-09 17:19 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2026:33264 0 None None None 2026-06-29 20:42:25 UTC
Red Hat Product Errata RHBA-2026:33265 0 None None None 2026-06-29 20:45:56 UTC
Red Hat Product Errata RHBA-2026:33269 0 None None None 2026-06-29 20:57:28 UTC
Red Hat Product Errata RHBA-2026:33274 0 None None None 2026-06-29 20:54:28 UTC
Red Hat Product Errata RHBA-2026:33496 0 None None None 2026-06-30 12:37:55 UTC
Red Hat Product Errata RHBA-2026:33774 0 None None None 2026-06-30 21:16:36 UTC
Red Hat Product Errata RHBA-2026:35825 0 None None None 2026-07-06 01:03:58 UTC
Red Hat Product Errata RHBA-2026:35884 0 None None None 2026-07-06 15:51:10 UTC
Red Hat Product Errata RHBA-2026:37279 0 None None None 2026-07-09 12:16:36 UTC
Red Hat Product Errata RHSA-2026:33092 0 None None None 2026-06-29 22:43:59 UTC
Red Hat Product Errata RHSA-2026:33126 0 None None None 2026-06-29 15:31:40 UTC
Red Hat Product Errata RHSA-2026:33170 0 None None None 2026-06-29 17:28:01 UTC
Red Hat Product Errata RHSA-2026:33226 0 None None None 2026-06-29 21:21:26 UTC
Red Hat Product Errata RHSA-2026:33227 0 None None None 2026-06-29 19:40:51 UTC
Red Hat Product Errata RHSA-2026:33228 0 None None None 2026-06-29 20:09:49 UTC
Red Hat Product Errata RHSA-2026:33229 0 None None None 2026-06-29 20:36:19 UTC
Red Hat Product Errata RHSA-2026:33230 0 None None None 2026-06-29 20:26:20 UTC
Red Hat Product Errata RHSA-2026:33231 0 None None None 2026-06-29 19:49:20 UTC
Red Hat Product Errata RHSA-2026:34211 0 None None None 2026-07-01 12:10:50 UTC
Red Hat Product Errata RHSA-2026:36643 0 None None None 2026-07-08 09:48:56 UTC
Red Hat Product Errata RHSA-2026:37395 0 None None None 2026-07-09 17:13:16 UTC
Red Hat Product Errata RHSA-2026:37396 0 None None None 2026-07-09 17:18:59 UTC

Description OSIDB Bzimport 2026-04-20 21:01:58 UTC 
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.
Comment 3 errata-xmlrpc 2026-06-29 15:31:39 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:33126 https://access.redhat.com/errata/RHSA-2026:33126
Comment 4 errata-xmlrpc 2026-06-29 17:28:00 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:33170 https://access.redhat.com/errata/RHSA-2026:33170
Comment 5 errata-xmlrpc 2026-06-29 19:40:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:33227 https://access.redhat.com/errata/RHSA-2026:33227
Comment 6 errata-xmlrpc 2026-06-29 19:49:18 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:33231 https://access.redhat.com/errata/RHSA-2026:33231
Comment 7 errata-xmlrpc 2026-06-29 20:09:48 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:33228 https://access.redhat.com/errata/RHSA-2026:33228
Comment 8 errata-xmlrpc 2026-06-29 20:26:19 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:33230 https://access.redhat.com/errata/RHSA-2026:33230
Comment 9 errata-xmlrpc 2026-06-29 20:36:17 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:33229 https://access.redhat.com/errata/RHSA-2026:33229
Comment 10 errata-xmlrpc 2026-06-29 21:21:25 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:33226 https://access.redhat.com/errata/RHSA-2026:33226
Comment 11 errata-xmlrpc 2026-06-29 22:43:57 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:33092 https://access.redhat.com/errata/RHSA-2026:33092
Comment 12 errata-xmlrpc 2026-07-01 12:10:48 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:34211 https://access.redhat.com/errata/RHSA-2026:34211
Comment 13 errata-xmlrpc 2026-07-08 09:48:55 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:36643 https://access.redhat.com/errata/RHSA-2026:36643
Comment 14 errata-xmlrpc 2026-07-09 17:13:15 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION

Via RHSA-2026:37395 https://access.redhat.com/errata/RHSA-2026:37395
Comment 15 errata-xmlrpc 2026-07-09 17:18:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:37396 https://access.redhat.com/errata/RHSA-2026:37396
Note You need to log in before you can comment on or make changes to this bug.