CVE-2026-58470: GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing
GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in the affected client.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GNU Wgetto a version that resolves this vulnerability.Fixed in 1.25.0Patch commit 43d3ba9 - Compensating control
If immediate upgrading is not possible, mitigate by preventing untrusted servers from being contacted (e.g., restrict allowed download sources/network access) so attackers cannot supply malicious Content-Range header values to affected GNU Wget clients.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58470?
CVE-2026-58470 has a severity rating of medium, with a score of 5.3.
How do I fix CVE-2026-58470?
To fix CVE-2026-58470, upgrade GNU Wget to the latest version beyond 1.25.0, which includes the patch for this vulnerability.
What type of vulnerability is CVE-2026-58470?
CVE-2026-58470 is classified as an integer overflow vulnerability.
Which function is affected by CVE-2026-58470?
The parse_content_range() function within src/http.c is affected by CVE-2026-58470.
What could an attacker potentially achieve with CVE-2026-58470?
An attacker could exploit CVE-2026-58470 by supplying malicious Content-Range header values that trigger signed integer arithmetic overflow.