C Library — security advisories

vendor: GNU3 advisories1 exploited3 sourceslatest 2026-08-06⚡ RSS feed

Every advisory CSIRTS.com has correlated to C Library, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch C Library

Get an email when a new C Library advisory drops — max one per day, one-click unsubscribe.

CVE-2025-4802: Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

highCVSS 8.4CVE-2025-4802msrc2026-08-06

criticalexploitedCVE-2023-4911cisa-kev2023-11-21