CVE-2026-56392

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-56392
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56392.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-56392
Downstream
DEBIAN (1)
ECHO (1)
JLSEC (1)
OESA (5)
openSUSE (1)
RHBA (1)
RHSA (3)
RLSA (2)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
Published
2026-07-24T07:44:54Z
Modified
2026-10-22T02:48:03Z
Severity
  • 1.8 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Heap-based Buffer Overflow in GNU coreutils
Details

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Database specific 
{
    "cna_assigner":  "CERT-PL",
    "cwe_ids":  [
        "CWE-122"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56392.json"
}
References

Affected packages

Git / cgit.git.savannah.gnu.org/cgit/coreutils.git

Affected ranges

Type
GIT
Repo
https://cgit.git.savannah.gnu.org/cgit/coreutils.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "fixed":  "b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}
Type
GIT
Repo
https://https.git.savannah.gnu.org/git/coreutils.git/
Events
Introduced
c01fd163a47468a8296fb369f5233853bb551bb6
Last Affected
c01fd163a47468a8296fb369f5233853bb551bb6
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "9.11"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "cpe":  "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "9.11"
                },
                {
                    "last_affected":  "9.11"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

9.*
9.11
v9.*
v9.11

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56392.json"