CVE-2026-6368 — wordexp with WRDE_APPEND can return or use invalid memory
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent ca…
Published: 2026-08-10 · CVSS: 2.1 · CVSS 4.0
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7