CVE-2025-15281

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

State: Published
Severity: 7.5 High
Published: Jan 20, 2026
Updated: Jan 22, 2026
Reserved: Dec 29, 2025

Description

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-908 Use of Uninitialized Resource

Affected Products

Product	Versions
glibcThe GNU C Library	2.0 through 2.42Affected

References

https://sourceware.org/bugzilla/show_bug.cgi?id=33814
http://www.openwall.com/lists/oss-security/2026/01/20/3

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.