Skip to main content

glibc tdelete CVE-2026-19542

MEDIUM
2026-08-27 vendor:ubuntu
Buffer Overflow Red Hat Suse
Share

Severity by source

vuln.today AI
8.1 HIGH

Network vector assumed via an intermediary application; AC:H reflects the need to control tdelete inputs through an application-specific code path.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SUSE PRIMARY
4.2 MEDIUM
AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Red Hat
4.2 MEDIUM
qualitative

Primary rating from SUSE.

Lifecycle Timeline

2
Analysis Generated
Aug 27, 2026 - 22:09 vuln.today
CVE Published
Aug 27, 2026 - 00:00 cve.org
MEDIUM

DescriptionCVE.org

[Out-of-bounds stack array access in tdelete]

AnalysisAI

Out-of-bounds stack array access in the tdelete function affects the GNU C Library (glibc) as reported by Ubuntu. The tdelete function, part of POSIX binary tree search routines (tsearch family), contains a memory safety flaw where a stack-allocated array can be accessed beyond its bounds during tree node deletion. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires that a reachable application on the target system calls glibc's tdelete function with attacker-influenced input - specifically, the tree contents, deletion keys, or operation ordering must be partially or fully controlled by the attacker. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Available signals are sparse: no CVSS vector, no EPSS score, no KEV listing, and no POC availability data were provided, making precise risk quantification impossible. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply the glibc update provided by Ubuntu through the standard package manager using 'apt-get update && apt-get upgrade libc6'. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SLES15-SP5-CHOST-BYOS-SAP-CCloud Affected
SLES15-SP6-CHOST-BYOS Affected
SLES15-SP6-CHOST-BYOS-Aliyun Affected
SLES15-SP6-CHOST-BYOS-Azure Affected
SLES15-SP6-CHOST-BYOS-EC2 Affected

Share

CVE-2026-19542 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy