Codeready Linux Builder For Arm64 vulnerabilities

6 known vulnerabilities in Codeready Linux Builder For Arm64 from Red Hat. 6 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Red Hat Enterprise Linux 10: Integer Overflow or Wraparound

  CVE-2025-13601Nov 26, 2025Red Hat

  A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calcu

• 7.4 High severity

  Red Hat Enterprise Linux 8: URL Redirection to Untrusted Site

  CVE-2025-3155Apr 3, 2025Red HatEPSS 13.1%

  A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

• 7.1 High severity

  Red Hat Enterprise Linux 8: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2023-3758Apr 18, 2024Red HatEPSS 1.04%

  A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

• 7.3 High severity

  Red Hat Enterprise Linux 8: Incorrect Default Permissions

  CVE-2024-1488Feb 15, 2024Red Hat

  A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbou

• 7.8 High severity

  Red Hat Enterprise Linux 8: Use After Free

  CVE-2023-5633Oct 23, 2023Red Hat

  The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration e

• 7.8 High severity

  GNU C Library Buffer Overflow Exploited

  CVE-2023-4911Oct 3, 2023Red HatEPSS 63.8%

  A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binari