CVE detail
CVE-2026-18839
An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 13.9 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 3
- within the 30d window
- Peak daily
- 2
- highest bucket
Evidence
Source links by recency
3 source links · newest first
Information published.
vendormsrc.microsoft.comAug 9, 2026, 8:03 AM- https://bugzilla.redhat.com/show_bug.cgi?id=2511010bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comAug 5, 2026, 9:16 PM - https://access.redhat.com/security/cve/CVE-2026-18839access.redhat.com
No excerpt available.
Exploitaccess.redhat.comAug 5, 2026, 9:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-18728CVSS 6.5 · Medium
A flaw was found in open-iscsi. An integer underflow vulnerability in the `iscsiuio` component, specifically during IPv4 Dynamic Host Configuration Protocol (DHCP) parsing, allows…
- CVE-2026-18727CVSS 6.5 · Medium
A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read during Dynamic Host Configuration Protocol for IPv6 (D…
- CVE-2026-73433CVSS 6.6 · Medium
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by…
- CVE-2026-18687CVSS 7.1 · High
MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configurati…
- CVE-2026-71389CVSS 6.2 · Medium
CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service. An attacker could exploit thi…
- CVE-2026-64909CVSS 7.8 · High
Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.