CVE-2026-6368

The GNU C Library versions 2.0 to 2.43 are vulnerable to a flaw in the wordexp function when used with the WRDE_APPEND flag, leading to the potential exposure of invalid memory in the we_wordv member. This can result in process termination upon subsequent calls to wordfree, posing a risk of application instability. Developers and system administrators using affected versions should prioritize this issue to prevent unexpected crashes in their applications.