CVE-2026-38639

Published: Jun 26, 2026Modified: Jun 29, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of Service (DoS) via parsing a crafted input.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (5)

https://github.com/Marsman1996/pocs/tree/master/redox/CVE-2026-38639

Source: cve@mitre.org

https://gitlab.redox-os.org/redox-os/relibc/-/issues/265

Source: cve@mitre.org

https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/990

Source: cve@mitre.org

https://gitlab.redox-os.org/redox-os/relibc/-/work_items/265

Source: cve@mitre.org

https://gitlab.redox-os.org/redox-os/relibc/-/work_items/265

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.