CVE-2026-5435: GNU Glibc

High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

Affected products

• GNU Glibc: from 2.2

Published 2026-04-28. Last modified 2026-07-14.