CVE-2025-15281
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Jan 20, 2026
CISA due date
—
The record
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | glibc | 0 | 2.42-r7 |
| Mageia:9 | glibc | 0 | 2.36-59.mga9 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | glibc | 0 | 2.38-150600.14.40.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP7 | glibc | 0 | 2.38-150600.14.40.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | glibc | 0 | 2.38-150600.14.40.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | glibc | 0 | 2.38-150600.14.40.1 |
| SUSE:Linux Micro 6.1 | glibc | 0 | 2.38-slfo.1.1_6.1 |
| Wolfi | glibc | 0 | 2.42-r7 |
| openSUSE:Leap 15.6 | glibc | 0 | 2.38-150600.14.40.1 |
| openSUSE:Leap 16.0 | glibc | 0 | 2.40-160000.3.1 |
| openSUSE:Leap 16.0 | glibc-cross-aarch64-src | 0 | 2.40-160000.3.1 |
| openSUSE:Leap 16.0 | glibc-cross-ppc64le-src | 0 | 2.40-160000.3.1 |
| openSUSE:Leap 16.0 | glibc-cross-riscv64-src | 0 | 2.40-160000.3.1 |
| openSUSE:Leap 16.0 | glibc-cross-s390x-src | 0 | 2.40-160000.3.1 |
| openSUSE:Tumbleweed | glibc | 0 | 2.43-1.1 |
Related vulnerabilities
- CVE-2026-4437 Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies… Also affects glibc
- CVE-2026-4438 Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies… Also affects glibc
- CVE-2023-6246 A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc… Also affects glibc
- CVE-2023-6780 An integer overflow was found in the __vsyslog_internal function of the glibc library. Also affects glibc
- CVE-2023-6779 An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of… Also affects glibc
- CVE-2026-6238 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library… Also affects glibc
- CVE-2026-5435 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library… Also affects glibc
- CVE-2026-5450 Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C… Also affects glibc