SecurityFan score 23 · Tier C
The GNU C Library security advisories update for 2026-11-11
The Brief
- The GNU C Library published security advisory GLIBC-SA-2026-0027 on 2026-11-11, as part of its November 2026 advisories.
- The advisory describes a one-byte buffer overflow in the scanf %s and %[ conversions for wide characters.
- Calling the wide scanf family of functions (swscanf, fwscanf, wscanf) is the trigger described in the excerpt available.
Why it matters
Software that calls glibc's wide scanf functions may be affected by a memory-safety bug, so developers should check whether their code uses these functions and whether their glibc version is patched.
Who’s affected
- Projects that call swscanf, fwscanf or wscanf with glibc
- Systems running the GNU C Library
What to do
- Read the full GLIBC-SA-2026-0027 advisory to confirm affected versions and the fix
- #glibc
- #security
- #buffer-overflow
- #c-library
- #scanf
Posted by Adhemerval Zanella Netto on Nov 11 The following security advisories have been published: GLIBC-SA-2026-0027: =================== scanf %s and %[ one-byte buffer overflow in wide character conversion Calling the wide scanf family of functions (swscanf, fwscanf, wscanf…
Timeline
GLIBC-SA-2026-0027 security advisory published
Open Source Security
The GNU C Library security advisories update for 2026-11-11