Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-56391

GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.0%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2026-56391
  • Gnu » Coreutils » Version: 9.10
    cpe:2.3:a:gnu:coreutils:9.10
  • Gnu » Coreutils » Version: 9.11
    cpe:2.3:a:gnu:coreutils:9.11
  • Gnu » Coreutils » Version: 9.5
    cpe:2.3:a:gnu:coreutils:9.5
  • Gnu » Coreutils » Version: 9.6
    cpe:2.3:a:gnu:coreutils:9.6
  • Gnu » Coreutils » Version: 9.7
    cpe:2.3:a:gnu:coreutils:9.7
  • Gnu » Coreutils » Version: 9.8
    cpe:2.3:a:gnu:coreutils:9.8
  • Gnu » Coreutils » Version: 9.9
    cpe:2.3:a:gnu:coreutils:9.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved