Low severityNVD Advisory· Published Aug 10, 2026

CVE-2026-6368

Description

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

Affected products

GNU/GNU C Libraryllm-create
Range: 2.0 - 2.43
GNU/Glibcllm-create
Range: 2.0 - 2.43

Patches

Vulnerability mechanics

References

sourceware.org/bugzilla/show_bug.cginvd

News mentions

No linked articles in our index yet.

cvss	0.065
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000