CVE-2022-3715High· 7.8▾ MidnightPoC availableA flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 42.9 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
Exploit / PoC code exists
0.4% → 0.4%
A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.
bash >= 5.1, < 5.1.8enterprise_linux = 9.0Upgrade past the affected range:
bash 5.1.8Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2021-3826Medium· 6.5Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
CVE-2025-7546Medium· 5.3A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45
CVE-2023-39128Medium· 5.5GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.
CVE-2019-18276High· 7.8An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11
CVE-2019-1010022Critical· 9.8GNU Libc current is affected by: Mitigation bypass
CVE-2026-90831Medium· 5.3A vulnerability was detected in GNU Binutils 2.47