CVE-2026-56978: Security vulnerability
Published Sep 15, 2026
·Updated
In getglobalconfigitemaddr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Event History
Sep 15, 2026
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
DescriptionWeakness
Data Sourced
via NVD·07:17 PM
Description
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The issue is described as a local privilege-escalation vulnerability. Exploitation does not require additional execution privileges or user interaction.
2
What is the underlying flaw?
The flaw is a missing bounds check in get_global_config_item_addr in gc.c, which can result in an out-of-bounds read.