CVE-2017-17426: Integer Overflow
Last updated 25 August 2025
Other sources
The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to allocate an object whose size is close to SIZEMAX, potentially leading to a subsequent heap overflow. This occurs because the per-thread cache (aka tcache) feature enables a code path that lacks an integer overflow check.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-17426?
CVE-2017-17426 is a vulnerability found in the GNU C Library (glibc) version 2.26 that could result in a heap overflow if an attempt is made to allocate an object whose size is close to SIZE_MAX.
What is the severity of CVE-2017-17426?
CVE-2017-17426 has a severity rating of 8.1 (High).
Which software versions are affected by CVE-2017-17426?
CVE-2017-17426 affects GNU C Library (glibc) versions 2.26.
How can I fix CVE-2017-17426?
To fix CVE-2017-17426, upgrade to GNU C Library (glibc) version 2.27 or higher.
Where can I find more information about CVE-2017-17426?
You can find more information about CVE-2017-17426 on the MITRE website: [CVE-2017-17426](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17426).