The vulnerability is found in the wordexp function of the GNU C Library. When the WRDE_APPEND flag is used, the function may return an array containing pointers to uninitialized or freed memory. A subsequent call to wordfree on that array can cause the process to abort, resulting in a denial of service. This weakness is classified as CWE‑908 and carries a low CVSS score, indicating limited impact when present.

The GNU C Library (glibc) versions from 2.0 through 2.43 are affected. Any application that invokes wordexp with the WRDE_APPEND flag while linked against these releases is vulnerable.

The CVSS score of 2.1 reflects moderate risk. EPSS information is unavailable and the issue is not listed in the CISA KEV catalog. Because the flaw requires the attacker to cause the target program to call wordexp with the WRDE_APPEND option, exploitation is most likely local or requires privileged code execution. Remote exploitation through this interface is unlikely, but if an application exposed such a call to an untrusted user, denial of service could result.