Servers and applications
CVE-2025-5702
The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the…
- Severity
- Medium 5.6
- Published
- 5 Jun 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2.39-209, 2.40-139, 2.41-60
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
GNU C LibraryServers and applications · cpe:a:gnu:glibc |
|