TI-2026-04772 CVE-2026-5450 · GHSA-v898-xg3c-w4rj
scanf %mc off-by-one heap buffer overflow
Priority HIGH 82
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one by…