CVE-2026-5435

Potential buffer overflow in ns_sprintrrf TSIG handling path

State: Published
Severity: 7.3 High
Published: Apr 28, 2026
Updated: Oct 15, 2026
Reserved: Apr 2, 2026

Description

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds write

Affected Products

Product	Versions
glibcThe GNU C Library	2.2 and laterAffected

References

https://sourceware.org/bugzilla/show_bug.cgi?id=34033issue-tracking
https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#umailing-list
https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.