This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-18839 →

DEBIAN-CVE-2026-18839

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can ca...

Original description

The description as published by the source.

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 popt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 popt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 popt

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

References

advisory security-tracker.debian.org