The vulnerability is a buffer overflow in the glibc functions strfmon and strfmon_l caused by an incorrect length used for right‑justified width padding. This overflow can overwrite adjacent memory, allowing an attacker to execute arbitrary code or cause a crash. The weakness falls under CWE‑787 and requires the attacker to supply malicious formatting strings.

All systems that run glibc versions affected by the unpatched buffer overflow are potentially vulnerable. The CVE does not list specific package versions, so any legacy or unpatched glibc installation could be impacted. The issue is present in the glibc library used by most Linux distributions.

The CVSS score is 6.8, indicating a moderate severity. No EPSS data is available, and the vulnerability is not currently listed in CISA's KEV catalog. The attack vector is inferred to be local or remote depending on how the vulnerable functions are used; exploiting the overflow typically requires an attacker to supply a crafted format string to an application that passes untrusted input to strfmon or strfmon_l. If such input is processed, arbitrary code execution may be achieved.