Name
popt
Version
1.19
Type
library
Description
Library for parsing command line options
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:*:popt:1.19:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
kirkstone
1.18
scarthgap
1.19

Patches#


#
Title
Author
Resolve
1
Fix CVE-2026-18739: off-by-one error in poptStuffArgs()
Yao Zhang <294772273@qq.com>
CVE-2026-18743
2
Fix CVE-2026-18743: buffer overflow(s) in
Panu Matilainen <pmatilai@redhat.com>
CVE-2026-18743

Vulnerabilities#


Name
Analysis
Description
Patched
A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).