NIXPKGS-2026-2348

GitHub issue published 14 hours ago

Popt-devel: popt-static: off-by-one in poptstuffargs

Permalink CVE-2026-18739

2.5 LOW

CVSS version (CVSS): 3.1
Attack Vector (AV): Local (L)
Attack Complexity (AC): High (H)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): Low (L)
Modified Attack Vector (MAV): Local (L)
Modified Attack Complexity (MAC): High (H)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): Low (L)

updated 14 hours ago by @LeSuisse Activity log

Created suggestion 1 day, 1 hour ago
@LeSuisse ignored
12 packages
- ipopt
- poptop
- poptracker
- scipopt-ug
- scipopt-gcg
- scipopt-scip
- scipopt-zimpl
- scipopt-papilo
- scipopt-soplex
- pkgsRocm.scipopt-ug
- python313Packages.cyipopt
- python314Packages.cyipopt
14 hours ago
@LeSuisse accepted 14 hours ago
@LeSuisse published on GitHub 14 hours ago

Popt-devel: popt-static: off-by-one in poptstuffargs

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacker to execute arbitrary code if the host application then unsafely processes the altered data.

References

https://access.redhat.com/security/cve/CVE-2026-18739 x_refsource_REDHATvdb-entry
RHBZ#2510737 issue-trackingx_refsource_REDHAT

Affected products

popt

rhcos

Matching in nixpkgs

pkgs.popt

Command line option parsing library

nixos-unstable 1.19
- nixpkgs-unstable 1.19
- nixos-unstable-small 1.19
nixos-26.05 1.19
- nixos-26.05-small 1.19
- nixpkgs-26.05-darwin 1.19

Ignored packages (12)

pkgs.ipopt

Software package for large-scale nonlinear optimization

nixos-unstable 3.14.19
- nixpkgs-unstable 3.14.19
- nixos-unstable-small 3.14.19
nixos-26.05 3.14.19
- nixos-26.05-small 3.14.19
- nixpkgs-26.05-darwin 3.14.19

pkgs.poptop

Modern top command that charts system metrics like CPU load, network IO, etc in the terminal

nixos-unstable 0.1.8
- nixpkgs-unstable 0.1.8
- nixos-unstable-small 0.1.8
nixos-26.05 0.1.8
- nixos-26.05-small 0.1.8
- nixpkgs-26.05-darwin 0.1.8

pkgs.poptracker

Scriptable tracker for randomized games

nixos-unstable 0.35.1
- nixpkgs-unstable 0.35.1
- nixos-unstable-small 0.35.3
nixos-26.05 0.35.1
- nixos-26.05-small 0.35.1
- nixpkgs-26.05-darwin 0.35.1

pkgs.scipopt-ug

Ubiquity Generator framework to parallelize branch-and-bound based solvers

nixos-unstable 1.0.1
- nixpkgs-unstable 1.0.1
- nixos-unstable-small 1.0.1
nixos-26.05 1.0.1
- nixos-26.05-small 1.0.1
- nixpkgs-26.05-darwin 1.0.1

pkgs.scipopt-gcg

Branch-and-Price & Column Generation for Everyone

nixos-unstable 4.0.1
- nixpkgs-unstable 4.0.1
- nixos-unstable-small 4.0.1
nixos-26.05 4.0.1
- nixos-26.05-small 4.0.1
- nixpkgs-26.05-darwin 4.0.1

pkgs.scipopt-scip

Solving Constraint Integer Programs

nixos-unstable 10.0.2
- nixpkgs-unstable 10.0.2
- nixos-unstable-small 10.0.3
nixos-26.05 10.0.2
- nixos-26.05-small 10.0.2
- nixpkgs-26.05-darwin 10.0.2

pkgs.scipopt-zimpl

Zuse Institute Mathematical Programming Language

nixos-unstable 3.7.0
- nixpkgs-unstable 3.7.0
- nixos-unstable-small 3.7.0
nixos-26.05 3.7.0
- nixos-26.05-small 3.7.0
- nixpkgs-26.05-darwin 3.7.0

pkgs.scipopt-papilo

Parallel Presolve for Integer and Linear Optimization

nixos-unstable 3.0.0
- nixpkgs-unstable 3.0.0
- nixos-unstable-small 3.0.1
nixos-26.05 3.0.0
- nixos-26.05-small 3.0.0
- nixpkgs-26.05-darwin 3.0.0

pkgs.scipopt-soplex

Sequential object-oriented simPlex

nixos-unstable 8.0.1
- nixpkgs-unstable 8.0.1
- nixos-unstable-small 8.0.3
nixos-26.05 8.0.1
- nixos-26.05-small 8.0.1
- nixpkgs-26.05-darwin 8.0.1

pkgs.pkgsRocm.scipopt-ug