CVE-2026-19499

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-19499
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19499.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-19499
Downstream
Published
2026-09-14T17:11:12Z
Modified
2026-09-16T03:45:47Z
Severity
  • 7.7 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H CVSS Calculator
Summary
Buffer overflow in strfmon and strfmon_l right-justification padding
Details

Calling strfmon and strfmon_l in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding.

Exploitation requires an application code path that calls strfmon or strfmon_l with right-justified width padding into a destination buffer that is large enough for the padding to succeed but too small for the internal memmove call. The field width or format may be attacker-influenced or a fixed susceptible pattern in the caller.

At the time of publication, no network-facing application impact is known.

Database specific 
{
    "cna_assigner": "glibc",
    "cwe_ids": [
        "CWE-122"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/19xxx/CVE-2026-19499.json"
}
References

Affected packages

Git / sourceware.org/git/glibc.git

Affected ranges

Type
GIT
Repo
https://sourceware.org/git/glibc.git
Events
Introduced
36f2487f13e3540be9ee0fb51876b1da72176d3f
Last Affected
c3a3a9808ad3ab4a3336836833f83288b672ccbf
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "2.38"
        },
        {
            "last_affected": "2.44"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

glibc-2.*
glibc-2.38
glibc-2.38.9000
glibc-2.39
glibc-2.39.9000
glibc-2.40
glibc-2.40.9000
glibc-2.41
glibc-2.41.9000
glibc-2.42
glibc-2.42.9000
glibc-2.43
glibc-2.43.9000
glibc-2.44

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-19499.json"