CVE-2026-18839CWE-191

CVE-2026-18839

Low · published August 6, 2026

CVSS v3.1
2.2
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.

The record
Technical detail
CVSS v3.1
2.2 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00126 · 2.1th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2026-08-06T01:16Z
References (3)
https://access.redhat.com/errata/RHSA-2026:77932 · [email protected]https://access.redhat.com/security/cve/CVE-2026-18839 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2511010 · [email protected]
EPSS history
Timeline
  • 05 AUG 20:45Z
    Popt-devel: popt-static: size_t underflow in singleoptionhelp
    cvelistv5