A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacker to execute arbitrary code if the host application then unsafely processes the altered data.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade popt | Sep 24, 2026 | Sep 23, 2026 |
| Ibm Aix | — | Apply the fix or workaround for rpm_advisory5 | Oct 15, 2026 | Oct 12, 2026 |
| Redhat_linux | — | No solution exists | Aug 5, 2026 | Aug 3, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub