Medium severity4.0NVD Advisory· Published Jun 23, 2026· Updated Jun 29, 2026

CVE-2026-57053

Description

GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/Libidn2 versions
cpe:2.3:a:gnu:libidn:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:libidn:*:*:*:*:*:*:*:*range: >=0.1.15,<1.44
- (no CPE)range: <1.44
osv-coords
pkg:rpm/opensuse/libidn&distro=openSUSE%20Leap%2016.0
Range: < 1.43-160000.3.1

Patches

Vulnerability mechanics

References

lists.gnu.org/archive/html/help-libidn/2026-05/msg00000.htmlnvdExploitMailing List
lists.gnu.org/archive/html/help-libidn/2026-06/msg00001.htmlnvdMailing List

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000