What is GHSA-cm6j-gmqf-j2cm?

GHSA-cm6j-gmqf-j2cm is a security advisory published by GitHub Security Advisories with Low severity. Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the...

Which CVE IDs does GHSA-cm6j-gmqf-j2cm cover?

GHSA-cm6j-gmqf-j2cm covers the following CVE IDs: CVE-2026-6368. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-cm6j-gmqf-j2cmLow

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the...

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-6368 →

📋 Description

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-6368
https://sourceware.org/bugzilla/show_bug.cgi?id=34090
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014;h=1e9a0039f07471ddfe6816e5df04875bec409f92;hb=HEAD
https://github.com/advisories/GHSA-cm6j-gmqf-j2cm