GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade wget | Oct 11, 2026 | Sep 1, 2026 |
| Redhat_linux | — | Upgrade wget-debugsourceNo solution existsUpgrade wgetUpgrade wget-debuginfo | Jul 17, 2026 | Jul 7, 2026 |
| Rocky_linux | — | Upgrade wget-debugsourceUpgrade wget-debuginfoUpgrade wget | Sep 3, 2026 | Sep 2, 2026 |
| Ubuntu | — | Upgrade wget (Ubuntu Pro)Upgrade wget | Jul 15, 2026 | Jul 14, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 20, 2026 | Jul 7, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub