# Gnu C Library vulnerabilities Source: https://junglewise.ai/threats/technologies/c-library Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/c-library.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 9 vulnerabilities in Gnu C Library: 0 in the last 7 days and 8 in the last 90 days, 1 of them critical and 1 exploited in the wild. The most recent, CVE-2026-122054, was published on 4 November 2026. 2 vulnerabilities in the last four weeks, down 50% on the four before (4). ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 8 - All time: 9 (1 critical, 1 exploited in the wild) ## About Gnu C Library Standard C library providing core functions for C programming. ## Latest Gnu C Library vulnerabilities - [CVE-2026-122054: GNU C Library BIG-HKSCS character encoding hang on crafted input](https://junglewise.ai/threats/cve-2026-122054-converting-crafted-big-hkscs-input-to-ucs-4-or-the-internal-wide) (medium, CVSS 5.9, published 4 Nov 2026) - [CVE-2026-84243: GNU C Library gettext directory traversal in LANGUAGE variable](https://junglewise.ai/threats/cve-2026-84243-the-gettext-family-of-functions-in-the-gnu-c-library-version-2-0) (high, CVSS 7, published 30 Oct 2026) - [CVE-2026-8674: GNU C Library DNS resolver assertion failure in search list parsing](https://junglewise.ai/threats/cve-2026-8674-gnu-c-library-dns-resolver-assertion-failure-in-search-list) (medium, CVSS 5.3, published 17 Sep 2026) - [CVE-2026-80489: GNU C Library EUC_JISX0213 converter denial of service](https://junglewise.ai/threats/cve-2026-80489-gnu-c-library-euc-jisx0213-converter-denial-of-service) (medium, CVSS 5.9, published 15 Sep 2026) - [CVE-2026-19542: GNU C Library tdelete stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-19542-gnu-c-library-tdelete-stack-based-buffer-overflow) (medium, CVSS 5.6, published 14 Sep 2026) - [CVE-2026-19499: GNU C Library buffer overflow in strfmon right-justification](https://junglewise.ai/threats/cve-2026-19499-gnu-c-library-buffer-overflow-in-strfmon-right-justification) (high, CVSS 7.7, published 14 Sep 2026) - [CVE-2026-89092: GNU C Library nscd stack overflow in DNS cache handling](https://junglewise.ai/threats/cve-2026-89092-gnu-c-library-nscd-stack-overflow-in-dns-cache-handling) (medium, CVSS 4.2, published 11 Sep 2026) - [CVE-2026-18374: GNU C Library heap buffer overflow in fopen ccs= handling](https://junglewise.ai/threats/cve-2026-18374-gnu-c-library-heap-buffer-overflow-in-fopen-ccs-handling) (medium, CVSS 4.9, published 27 Aug 2026) - [CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Oct 2023) ## Most severe Gnu C Library vulnerabilities - [CVE-2023-4911: GNU C Library Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2023-4911-gnu-c-library-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 7.8, published 3 Oct 2023) - [CVE-2026-19499: GNU C Library buffer overflow in strfmon right-justification](https://junglewise.ai/threats/cve-2026-19499-gnu-c-library-buffer-overflow-in-strfmon-right-justification) (high, CVSS 7.7, published 14 Sep 2026) - [CVE-2026-84243: GNU C Library gettext directory traversal in LANGUAGE variable](https://junglewise.ai/threats/cve-2026-84243-the-gettext-family-of-functions-in-the-gnu-c-library-version-2-0) (high, CVSS 7, published 30 Oct 2026) - [CVE-2026-80489: GNU C Library EUC_JISX0213 converter denial of service](https://junglewise.ai/threats/cve-2026-80489-gnu-c-library-euc-jisx0213-converter-denial-of-service) (medium, CVSS 5.9, published 15 Sep 2026) - [CVE-2026-122054: GNU C Library BIG-HKSCS character encoding hang on crafted input](https://junglewise.ai/threats/cve-2026-122054-converting-crafted-big-hkscs-input-to-ucs-4-or-the-internal-wide) (medium, CVSS 5.9, published 4 Nov 2026) - [CVE-2026-19542: GNU C Library tdelete stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-19542-gnu-c-library-tdelete-stack-based-buffer-overflow) (medium, CVSS 5.6, published 14 Sep 2026) - [CVE-2026-8674: GNU C Library DNS resolver assertion failure in search list parsing](https://junglewise.ai/threats/cve-2026-8674-gnu-c-library-dns-resolver-assertion-failure-in-search-list) (medium, CVSS 5.3, published 17 Sep 2026) - [CVE-2026-18374: GNU C Library heap buffer overflow in fopen ccs= handling](https://junglewise.ai/threats/cve-2026-18374-gnu-c-library-heap-buffer-overflow-in-fopen-ccs-handling) (medium, CVSS 4.9, published 27 Aug 2026) - [CVE-2026-89092: GNU C Library nscd stack overflow in DNS cache handling](https://junglewise.ai/threats/cve-2026-89092-gnu-c-library-nscd-stack-overflow-in-dns-cache-handling) (medium, CVSS 4.2, published 11 Sep 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, down 50% on the four before (4). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 1 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 4 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 1 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Gnu technologies - [Gnu Binutils](https://junglewise.ai/threats/technologies/binutils): 42 vulnerabilities - [GnuTLS](https://junglewise.ai/threats/technologies/gnutls): 21 vulnerabilities - [Gnu Glibc](https://junglewise.ai/threats/technologies/glibc): 20 vulnerabilities - [Gnu LibreDWG](https://junglewise.ai/threats/technologies/libredwg): 14 vulnerabilities - [Gnu Emacs](https://junglewise.ai/threats/technologies/emacs): 10 vulnerabilities - [GNU tar](https://junglewise.ai/threats/technologies/tar): 10 vulnerabilities - [Gnu Bash](https://junglewise.ai/threats/technologies/bash): 7 vulnerabilities - [Gnu Wget](https://junglewise.ai/threats/technologies/wget): 7 vulnerabilities - [Gnu Cpio](https://junglewise.ai/threats/technologies/cpio): 5 vulnerabilities - [Gnu Grub2](https://junglewise.ai/threats/technologies/grub2): 5 vulnerabilities - [Gnu Aspell](https://junglewise.ai/threats/technologies/aspell): 4 vulnerabilities - [GNU Coreutils](https://junglewise.ai/threats/technologies/coreutils): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Gnu C Library vulnerabilities", https://junglewise.ai/threats/technologies/c-library, 13 November 2026.