Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5146 articles · 251737 vulns · 37/41 feeds (7d)
← Back to list
2.2
CVE-2026-18839EXPLOITEDPATCHED
red hat · red hat enterprise linux

Popt-devel: popt-static: size_t underflow in singleoptionhelp

Description

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.

Affected Products

VendorProductVersions
red hatred hat enterprise linux1.13

References

  • https://access.redhat.com/errata/RHSA-2026:77932(vendor-advisory, x_refsource_REDHAT)
  • https://access.redhat.com/security/cve/CVE-2026-18839(vdb-entry, x_refsource_REDHAT)
  • https://bugzilla.redhat.com/show_bug.cgi?id=2511010(issue-tracking, x_refsource_REDHAT)

Related News (3 articles)

Tier B
CERT-FR19h ago
Multiples vulnérabilités dans les produits VMware (26 octobre 2026)
→ No new info (linked only)
Tier A
Microsoft MSRC78d ago
CVE-2026-18839 Popt-devel: popt-static: size_t underflow in singleoptionhelp
→ No new info (linked only)
Tier C
VulDB81d ago
CVE-2026-18839 | popt singleOptionHelp integer underflow
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.12.2 NONE
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
*
CWECWE-191
PublishedAug 5, 2026
Last enriched81d ago
Tags
remote code executionfile manipulationdenial of servicemultiple vulnerabilities
Trending Score50
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-103242EXP
Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag
Trending: 54
NONECVE-2026-18739EXP
Popt-devel: popt-static: off-by-one in poptstuffargs
Trending: 51
NONECVE-2026-18477EXP
Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape
Trending: 50
NONECVE-2026-110926EXP
Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels
Trending: 50
NONECVE-2026-18508EXP
Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
Trending: 50

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 5, 2026
Discovered by ZDM
Aug 5, 2026
Actively Exploited
Oct 16, 2026
Exploit Available
Oct 16, 2026
Patch Available
Oct 16, 2026