Most recent entries from osv_homebrew

BREW-glibc-CVE-2024-2961

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

BREW-glibc-CVE-2024-33599 — nscd: Stack-based buffer overflow in netgroup cache

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted by client requests then a subsequent client request for netgroup data may result in a stack-based buffer overflow. This flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

BREW-glibc-CVE-2024-33600 — nscd: Null pointer crashes after notfound response

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

nscd: Null pointer crashes after notfound response

If the Name Service Cache Daemon's (nscd) cache fails to add a not-found netgroup response to the cache, the client request can result in a null pointer dereference. This flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

BREW-glibc-CVE-2024-33601 — nscd: netgroup cache may terminate daemon on memory allocation failure

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

nscd: netgroup cache may terminate daemon on memory allocation failure

The Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or xrealloc and these functions may terminate the process due to a memory allocation failure resulting in a denial of service to the clients. The flaw was introduced in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

BREW-glibc-CVE-2025-0395

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

BREW-glibc-CVE-2025-15281 — wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

BREW-glibc-CVE-2025-5702

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.

BREW-glibc-CVE-2025-8058

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.

BREW-glibc-CVE-2026-0861 — Integer overflow in memalign leads to heap corruption

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.

Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc.

Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.

BREW-glibc-CVE-2026-0915 — getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

Sun, 28 Jun 2026 21:29:54 +0000

Affected: Homebrew: glibc

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.