2.5
Low
CVE-2026-18743 Popt-devel: popt-static: short realloc in poptconfigfiletostring
Description
A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:LExploitable with local access to the machine, with an ordinary account and without any user action; the impact on data or service is limited.
- Attack vector
- Local
- Attack complexity
- High
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| popt 1.11 | 1.11 → latest | No fix stated |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Hardened Images 1.19 | earliest → < 1.19-11.1.hum1 | 1.19-11.1.hum1 |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 5 | Versions not published |