CVE-2017-9728: Uclibc

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression.

Affected products

• Uclibc Uclibc: version 0.9.33.2 only

Published 2017-06-16. Last modified 2026-06-17.