Latest low severity vulnerabilities for vendor "gnu"

GNU coreutils (unexpand)Heap-based Buffer Overflow in GNU coreutils

Risk 21

Severity

1.8

First published (updated )

CVE-2026-56392

GNU diffutils (diff3 tool)Heap-based Buffer Overflow in GNU diffutils

Risk 34

Severity

2.1

First published (updated )

CVE-2026-53910

GNU gawkHeap buffer overflow in gawk

Risk 66

Severity

2.1

First published (updated )

CVE-2026-40468

GNU LibreDWGGNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow

Risk 39

Severity

1.9

First published (updated )

CVE-2026-15520

GNU LibreDWGGNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

Risk 18

Severity

1.9

First published (updated )

CVE-2026-15184

GNU LibreDWGGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow

Risk 39

Severity

1.9

First published (updated )

CVE-2026-15182

GNU gzipPredictable Temporary File in GNU gzip

Risk 28

Severity

2

First published (updated )

CVE-2026-41991

GNU SavaneGNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Risk 20

Severity

3.7

First published (updated )

CVE-2026-56355

GNU LibreDWGGNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds

Risk 13

Severity

1.9

EPSS

0.14%

First published (updated )

CVE-2026-9530

GNU LibreDWGGNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference

Risk 13

Severity

1.9

EPSS

0.14%

First published (updated )

CVE-2026-9529

GNU LibreDWGGNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds

Risk 13

Severity

1.9

EPSS

0.18%

First published (updated )

CVE-2026-9504

GNU LibreDWGGNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference

Risk 13

Severity

1.9

EPSS

0.11%

First published (updated )

CVE-2026-9503

GNU LibreDWGGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow

Risk 29

Severity

1.9

EPSS

0.15%

First published (updated )

CVE-2026-9502

GNU LibreDWGGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion

Risk 13

Severity

1.9

EPSS

0.14%

First published (updated )

CVE-2026-9501

GNU LibreDWGGNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow

Risk 29

Severity

1.9

EPSS

0.12%

First published (updated )

CVE-2026-9500

GNU NanoInsecure Directory Permissions in GNU nano Leading to Privilege Abuse

Risk 10

Severity

2.1

First published (updated )

CVE-2026-40556

GNU NanoNano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

Risk 11

Severity

2.5

EPSS

0.01%

First published (updated )

CVE-2026-6842

GNU Nanonano creates ~/.local with mode 0777 instead of 0700. In permissive-umask environments (containers, …

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2460018

GNU SedRace Condition in GNU Sed

Risk 11

Severity

2.1

EPSS

0.01%

First published (updated )

CVE-2026-5958

redhat Enterprise LinuxGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

Risk 21

Severity

3.7

First published (updated )

CVE-2026-3832

GNU C LibraryCalling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to …

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2431196

GNU C LibraryInteger Overflow

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2429771

GNU binutilsAn issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowi…

Risk 14

Severity

2.5

First published (updated )

CVE-2025-66861

GNU binutilsGNU Binutils ldmisc.c vfinfo out-of-bounds

Risk 32

Severity

1.9

First published (updated )

CVE-2025-11840

GNU binutilsGNU Binutils prdbg.c tg_tag_type return value

Risk 32

Severity

1.9

First published (updated )

CVE-2025-11839

GNU binutilsGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow

Risk 32

Severity

1.9

First published (updated )

CVE-2025-11495

GNU binutilsGNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds

Risk 32

Severity

1.9

First published (updated )

CVE-2025-11494

GNU binutilsGNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

Risk 32

Severity

1.9

First published (updated )

CVE-2025-11414

GNU binutilsGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

Risk 32

Severity

1.9

First published (updated )

CVE-2025-11413

GNU binutilsGNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

Risk 32

Severity

1.9

First published (updated )

CVE-2025-11412

Trending

Vendor Risk Score

Software

GNU coreutils (unexpand)Heap-based Buffer Overflow in GNU coreutils

GNU diffutils (diff3 tool)Heap-based Buffer Overflow in GNU diffutils

GNU gawkHeap buffer overflow in gawk

GNU LibreDWGGNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow

GNU LibreDWGGNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

Don't miss critical vulnerabilities

GNU LibreDWGGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow

GNU gzipPredictable Temporary File in GNU gzip

GNU SavaneGNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

GNU LibreDWGGNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds

GNU LibreDWGGNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference

Don't miss critical vulnerabilities

GNU LibreDWGGNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds

GNU LibreDWGGNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference

GNU LibreDWGGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow

GNU LibreDWGGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion

GNU LibreDWGGNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow

Don't miss critical vulnerabilities

GNU NanoInsecure Directory Permissions in GNU nano Leading to Privilege Abuse

GNU NanoNano: nano: local attacker can inject malicious .desktop launcher due to insecure directory permissions

GNU Nanonano creates ~/.local with mode 0777 instead of 0700. In permissive-umask environments (containers, …

GNU SedRace Condition in GNU Sed

redhat Enterprise LinuxGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

Don't miss critical vulnerabilities

GNU C LibraryCalling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to …

GNU C LibraryInteger Overflow

GNU binutilsAn issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowi…

GNU binutilsGNU Binutils ldmisc.c vfinfo out-of-bounds

GNU binutilsGNU Binutils prdbg.c tg_tag_type return value

Don't miss critical vulnerabilities

GNU binutilsGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow

GNU binutilsGNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds

GNU binutilsGNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

GNU binutilsGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

GNU binutilsGNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

Don't miss critical vulnerabilities

Company

Resources

Contact