CVE-2026-18743— Popt-devel: popt-static: short realloc in poptconfigfiletostring
Quick assessment
Affected
rpm-software-management popt
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
popt 中发现了一个缺陷。该漏洞允许攻击者向主机提供经过精心构造的配置内容，当该配置被加载时，可能导致轻微的内存损坏问题。其根本原因在于 函数在为缓冲区重新分配内存时存在错误。若该漏洞被成功利用，可能导致堆元数据损坏，进而使受影响进程不可用（即拒绝服务）。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-18743
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Popt-devel: popt-static: short realloc in poptconfigfiletostring
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in popt. This vulnerability allows an attacker to provide specially crafted configuration content to a host, which, when loaded, can lead to a small memory corruption issue. This occurs because of an error in how the `poptConfigFileToString` function reallocates memory for buffers. Successful exploitation could result in heap metadata corruption, potentially causing the affected process to become unavailable (denial of service).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
缓冲区大小计算不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| rpm-software-management | popt | 1.11 ~ * | - |
|
| Red Hat | Red Hat Enterprise Linux 10 | - |
cpe:/o:redhat:enterprise_linux:10
|
|
| Red Hat | Red Hat Enterprise Linux 6 | - |
cpe:/o:redhat:enterprise_linux:6
|
|
| Red Hat | Red Hat Enterprise Linux 7 | - |
cpe:/o:redhat:enterprise_linux:7
|
|
| Red Hat | Red Hat Enterprise Linux 8 | - |
cpe:/o:redhat:enterprise_linux:8
|
|
| Red Hat | Red Hat Enterprise Linux 9 | - |
cpe:/o:redhat:enterprise_linux:9
|
|
| Red Hat | Red Hat Hardened Images | - |
cpe:/a:redhat:hummingbird:1
|
|
| Red Hat | Red Hat OpenShift Container Platform 4 | - |
cpe:/a:redhat:openshift:4
|
|
| Red Hat | Red Hat OpenShift Container Platform 4 | - |
cpe:/a:redhat:openshift:4
|
|
II. Public POCs for CVE-2026-18743
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18743
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-18743 (1)
-
🔗 2510809 – (CVE-2026-18743) CVE-2026-18743 popt-devel: popt-static: Short realloc in poptConfigFileToString Read full article issue-tracking x_refsource_REDHAT
Other References for CVE-2026-18743 (1)
IV. Related Vulnerabilities
Same weakness: CWE-131
-
CVE-2026-78002
Rsyslog: rsyslog: denial of service via heap buffer overflow -
CVE-2026-44254
Wazuh: Stack Out-of-Bounds Write in remoted Decompression Pa -
CVE-2026-75093
sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_al -
CVE-2026-70457
rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() -
CVE-2026-42170
Gimp: gimp dds plug-in heap-based buffer overflow via bpp mi
V. Comments for CVE-2026-18743
No comments yet