CVE-2026-56391

A flaw was found in GNU coreutils uniq. When processing specially crafted multibyte input with the --check-chars option, an attacker can trigger an out-of-bounds read. This vulnerability can lead to a denial of service (DoS) due to an application crash and potentially expose sensitive information from adjacent memory.

This Moderate flaw in GNU coreutils uniq allows an out-of-bounds read when processing specially crafted multibyte input with the --check-chars option. An attacker providing malicious input to uniq could trigger a denial of service due to an application crash, and potentially disclose adjacent heap memory. Exploitation requires local user interaction to execute uniq with the vulnerable options and input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.