CVE-2026-40200
An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo number on 64-bit platforms, which is not practical).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40200?
CVE-2026-40200 is considered a high severity vulnerability due to the potential for stack-based memory corruption.
How do I fix CVE-2026-40200?
To fix CVE-2026-40200, upgrade musl libc to a version later than 1.2.6.
What systems are affected by CVE-2026-40200?
CVE-2026-40200 affects musl libc versions from 0.7.10 to 1.2.6 on both 32-bit and 64-bit platforms.
What kind of attack does CVE-2026-40200 enable?
CVE-2026-40200 could potentially allow an attacker to execute arbitrary code through stack corruption when processing very large arrays.
How can I check if my version of musl libc is vulnerable to CVE-2026-40200?
You can check your version of musl libc against the vulnerability range specified in CVE-2026-40200 to determine if you are affected.