ZeroDay Findings
Sign inSign up

Findings

CVE-2019-7309

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal)…

Published Feb 3, 2019 · updated Oct 14, 2026 · gnu glibc

In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 3, 2019 · NIST NVD

    Detected

    In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

  2. Oct 14, 2026 · NIST NVD

    Updated

    In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

Affected

  • cpe gnu/glibcversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2019-7309

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2019-7309

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDVulnerability recordCVE-2019-7309

    In the GNU C Library (aka glibc or libc6) through 2.29, the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

    nvd.nist.gov

References