CVE-2026-40200

An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo number on 64-bit platforms, which is not practical).

• CWE-670

• https://musl.libc.org/releases.html
• https://www.openwall.com/lists/oss-security/2026/04/10/13
• http://www.openwall.com/lists/oss-security/2026/04/10/13

Published

Apr 10, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40195Incus is a system container and virtual machine manager. In …6.5
• CVE-2026-40196HomeBox is a home inventory and organization system. Version…8.1
• CVE-2026-40197Incus is a system container and virtual machine manager. In …6.5
• CVE-2026-40198Net::CIDR::Lite versions before 0.23 for Perl does not valid…7.5
• CVE-2026-40199Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv…6.5
• CVE-2026-4020The Gravity SMTP plugin for WordPress is vulnerable to Sensi…7.5
• CVE-2026-40201@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 al…5.4
• CVE-2026-40208An attacker might be able to delay the processing of DoH3 qu…3.7
• CVE-2026-40209An attacker might be able to cause outgoing TCP connections …5.3
• CVE-2026-4021The Contest Gallery plugin for WordPress is vulnerable to an…8.1
• CVE-2026-40210An out-of-bounds read might happen when SetMacAddrAction is …4.8
• CVE-2026-40211An attacker can send crafted DNS over HTTP/3 queries, trigge…5.3