CVE-2026-57053
GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2.
- Score
- CVSS 3.1 4.0 Medium
- Status
- Analyzed - cve@mitre.org
- Published
- 2026-06-23
- Last modified
- 2026-10-25
- Weaknesses
- CWE-1284
Affected products
References
- https://lists.gnu.org/archive/html/help-libidn/2026-06/msg00001.html
- https://lists.gnu.org/archive/html/help-libidn/2026-05/msg00000.html
