CVE detail
CVE-2026-38640
A reachable unwrap in the __assert_fail function (/assert/mod.rs) of relibc commit 61f42d allows attackers to cause a Denial of Service (DoS) via a crafted string.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 4
- within the 30d window
- Peak daily
- 4
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- https://gitlab.redox-os.org/redox-os/relibc/-/work_items/262gitlab.redox-os.org
No excerpt available.
referencegitlab.redox-os.orgJun 25, 2026, 9:16 PM - https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/986gitlab.redox-os.org
No excerpt available.
referencegitlab.redox-os.orgJun 25, 2026, 9:16 PM - https://gitlab.redox-os.org/redox-os/relibc/-/issues/262gitlab.redox-os.org
No excerpt available.
referencegitlab.redox-os.orgJun 25, 2026, 9:16 PM No excerpt available.
Exploitgithub.comJun 25, 2026, 9:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-66144CVSS 7.5 · High
Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a denial of service attack if a huge polic…
- CVE-2026-66143CVSS 7.5 · High
It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3.2.2 via certain crafted policies, which may lead to a denial o…
- CVE-2026-66142CVSS 7.5 · High
Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack whe…
- CVE-2026-14257CVSS 7.5 · High
brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but…
- CVE-2026-21723CVSS 5.3 · Medium
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short…
- CVE-2026-38763CVSS 5.5 · Medium
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub_13828