GNU coreutils vulnerabilities (CVE)

CVE records published for GNU coreutils, newest first. Follow to get an email when a new one appears.

2 results
1.8Low
CVE-2026-56392

Heap-based Buffer Overflow in GNU coreutils

GNU coreutils

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an unde…

4.6Medium
CVE-2026-56391

Out‑of‑bounds Read in GNU coreutils

GNU coreutils

GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer i…