CVE-2026-6368: wordexp with WRDE_APPEND can return or use invalid memory

wordexp with WRDE_APPEND can return or use invalid memory

Status

Published

2026-08-10

Updated

2026-08-12

Assigning organization

glibc

Description

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

glibc glibc

Default version status: unaffected

1.93-260 to < 2.43affected

References

https://sourceware.org/bugzilla/show_bug.cgi?id=34090 ↗
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014;h=1e9a0039f07471ddfe6816e5df04875bec409f92;hb=HEAD ↗