Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-83093.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-83093
Upstream
Published
2026-04-20T21:16:36Z
Modified
2026-08-30T05:26:50Z
Summary
CVE-2026-5450 affecting package glibc 2.38-20
Details

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

References

Affected packages

Azure Linux:3 / glibc

Package

Name
glibc
Purl
pkg:rpm/azure-linux/glibc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
2.38-20

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-83093.json"