CVE-2026-5435CWE-787

Potential buffer overflow in ns_sprintrrf TSIG handling path

High · published April 28, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
32.4
In the wild
Unconfirmed
What it is

The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00394 · 32.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-04-28T11:58Z
EPSS history
Timeline
  • 28 APR 11:58Z
    Potential buffer overflow in ns_sprintrrf TSIG handling path
    cvelistv5