CVE-2026-38639: Input Validation

Published Jun 26, 2026

Updated

An issue in the parsemonth function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of Service (DoS) via parsing a crafted input.

Affected Software

1 affected component

relibc=ab6a2e

Event History

Jun 26, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Systems using the affected relibc commit ab6a2e are exposed when they parse attacker-controlled input through the vulnerable parse_month function in /time/strptime.rs.

What does an attacker need to exploit it?

The CVSS vector indicates exploitation is network-accessible, requires no privileges or user interaction, and has low attack complexity. An attacker needs to provide crafted input that reaches the affected parsing function.

What is the impact of successful exploitation?

Successful exploitation can cause a denial of service. The provided CVSS vector indicates impact is limited to availability, with no stated confidentiality or integrity impact.

CVE-2026-38639: Input Validation

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?