EUVD-2026-68918
GHSA-2r56-6h49-5c5r
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Attacker must write a crafted config file locally (AV:L/PR:L); precise heap sizing required (AC:H); only process crash is possible, no C/I impact.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
Lifecycle Timeline
2DescriptionCVE.org
A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the poptConfigFileToString function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).
AnalysisAI
Heap metadata corruption in the popt command-line parsing library's poptConfigFileToString function can be triggered by a local, low-privileged attacker who supplies specially crafted configuration file content to an affected host. Successful exploitation causes the consuming process to crash, resulting in denial of service. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a local shell account with at least low privileges on the affected host (AV:L, PR:L from CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The overall risk is low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No specific patched popt version was identified in the available input data - patch status must be verified directly against the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-18743 and tracked via the Bugzilla entry at https://bugzilla.redhat.com/show_bug.cgi?id=2510809; apply any released RHSA errata promptly once available. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-131 – Incorrect Calculation of Buffer Size
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today