Open Source GNU libc

Name: Open Source GNU libc
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical2high1medium1low

updated 2026-10-26

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-6246US	high7.8	4.79% (92nd)	Exploit	2.36-9+deb12u4	2024-01-31	< 2.36-9+deb12u4
CVE-2022-23218US	critical9.8	5.26% (92nd)	—	no fix	2022-01-14	≤ 2.34
CVE-2022-23219US	critical9.8	4.69% (92nd)	—	no fix	2022-01-14	≤ 2.34
CVE-2023-6779US	high7.5	3.15% (88th)	—	2.36-9+deb12u4	2024-01-31	< 2.36-9+deb12u4
CVE-2023-6780US	medium5.3	2.69% (86th)	—	2.36-9+deb12u4	2024-01-31	< 2.36-9+deb12u4
CVE-2024-33600US	—	1.22% (68th)	—	2.40	2024-05-06	< 2.40
CVE-2024-33601US	—	1.07% (65th)	—	2.40	2024-05-06	< 2.40
CVE-2024-33602US	—	0.40% (34th)	—	2.40	2024-05-06	< 2.40
CVE-2021-27645US	low2.5	0.39% (32nd)	—	no fix	2021-02-24	≤ 2.33
CVE-2026-4046US	—	0.38% (32nd)	—	no fix	2026-03-30	≤ 2.43
CVE-2026-3904US	—	0.15% (4th)	—	no fix	2026-03-11	≤ 2.36
CVE-2026-18374US	—	0.14% (4th)	—	no fix	2026-08-27	≤ 2.45
CVE-2026-95818US	—	0.13% (3rd)	—	2.45	2026-09-22	< 2.45
CVE-2026-6368US	—	0.11% (1st)	—	2.44	2026-08-10	< 2.44
CVE-2026-86805US	—	0.10% (1st)	—	2.45	2026-09-22	< 2.45

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-617Reachable Assertion2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-189CWE-1891 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.