{"id":"CVE-2026-5435","revision":"2c10a5ec90c04dbe8112cc87fe9a474f","records":[{"revision":"2c10a5ec90c04dbe8112cc87fe9a474f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-5435","aliases":[],"title":"Potential buffer overflow in ns_sprintrrf TSIG handling path","description":"The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.","state":0,"publishedAt":"2026-04-28T11:58:54.962+00:00","modifiedAt":"2026-10-15T01:12:12.018+00:00","affected":[{"ecosystem":"Vendor product","name":"glibc","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"The GNU C Library\",\n                    \"product\": \"glibc\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"2.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://sourceware.org/bugzilla/show_bug.cgi?id=34033","https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-5435","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-5435","identifiers":["CVE-2026-5435"]},"retained":false,"historicalAffected":[]}],"coverage":[]}