# CVE-2026-57053: libidn: GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of misha... CVE-2026-57053 is fixed in 15 products on 1 platform, first by idn 1.43-2ubuntu0.26.04.1, released June 23, 2026. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2026-57053 - Priority: Routine - CVSS: 2.5 (low) - EPSS: 0.0014 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jun 23, 2026 ## Description GNU libidn before 1.44 is prone to out-of-bounds reads of uninitialized memory in the ToUnicode APIs because of mishandling in idna_to_unicode_internal. The affected code is not present in libidn2. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | idn Ubuntu 22.04.1 LTS (jammy) | 1.38-4ubuntu1.1 | [idn 1.38-4ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-idn-1.38-4ubuntu1.1.md) | Jul 10, 2026 | | Linux | idn Ubuntu 24.04.5 LTS (noble) | 1.42-1ubuntu0.1 | [idn 1.42-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-idn-1.42-1ubuntu0.1.md) | Jul 10, 2026 | | Linux | idn Ubuntu 26.04.1 LTS (resolute) | 1.43-2ubuntu0.26.04.1 | [idn 1.43-2ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-idn-1.43-2ubuntu0.26.04.1.md) | Jun 23, 2026 | | Linux | libidn Debian 14 | 1.44-1 | [DEBIAN-CVE-2026-57053](https://patchblox.com/security/data/fix/linux/debian-cve-2026-57053.md) | Jun 24, 2026 | | Linux | libidn Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-ACF66846EE](https://patchblox.com/security/data/fix/linux/fedora-2026-acf66846ee.md) | Aug 3, 2026 | | Linux | libidn opensuse-leap 16.0 | 1.43-160000.3.1 | [OPENSUSE-SU-2026:21758-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21758-1.md) | Sep 4, 2026 | | Linux | libidn sles 15.7 | 1.34-150000.3.5.1 | [SUSE-SU-2026:4000-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4000-1.md) | Sep 7, 2026 | | Linux | libidn sles 16.0 | 1.43-160000.3.1 | [SUSE-SU-2026:23621-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23621-1.md) | Sep 4, 2026 | | Linux | libidn-debuginfo Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-ACF66846EE](https://patchblox.com/security/data/fix/linux/fedora-2026-acf66846ee.md) | Aug 3, 2026 | | Linux | libidn-debugsource Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-ACF66846EE](https://patchblox.com/security/data/fix/linux/fedora-2026-acf66846ee.md) | Aug 3, 2026 | | Linux | libidn-devel Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-ACF66846EE](https://patchblox.com/security/data/fix/linux/fedora-2026-acf66846ee.md) | Aug 3, 2026 | | Linux | libidn-java Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-ACF66846EE](https://patchblox.com/security/data/fix/linux/fedora-2026-acf66846ee.md) | Aug 3, 2026 | | Linux | libidn-javadoc Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-ACF66846EE](https://patchblox.com/security/data/fix/linux/fedora-2026-acf66846ee.md) | Aug 3, 2026 | | Linux | libidn12 Ubuntu 22.04.1 LTS (jammy) | 1.38-4ubuntu1.1 | [libidn12 1.38-4ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libidn12-1.38-4ubuntu1.1.md) | Jul 10, 2026 | | Linux | libidn12 Ubuntu 24.04.5 LTS (noble) | 1.42-1ubuntu0.1 | [libidn12 1.42-1ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libidn12-1.42-1ubuntu0.1.md) | Jul 10, 2026 | | Linux | libidn12 Ubuntu 26.04.1 LTS (resolute) | 1.43-2ubuntu0.26.04.1 | [libidn12 1.43-2ubuntu0.26.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libidn12-1.43-2ubuntu0.26.04.1.md) | Jun 23, 2026 | | Linux | mingw-libidn Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-7DDAFB24A3](https://patchblox.com/security/data/fix/linux/fedora-2026-7ddafb24a3.md) | Aug 2, 2026 | | Linux | mingw32-libidn Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-7DDAFB24A3](https://patchblox.com/security/data/fix/linux/fedora-2026-7ddafb24a3.md) | Aug 2, 2026 | | Linux | mingw32-libidn-debuginfo Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-7DDAFB24A3](https://patchblox.com/security/data/fix/linux/fedora-2026-7ddafb24a3.md) | Aug 2, 2026 | | Linux | mingw32-libidn-static Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-7DDAFB24A3](https://patchblox.com/security/data/fix/linux/fedora-2026-7ddafb24a3.md) | Aug 2, 2026 | | Linux | mingw64-libidn Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-7DDAFB24A3](https://patchblox.com/security/data/fix/linux/fedora-2026-7ddafb24a3.md) | Aug 2, 2026 | | Linux | mingw64-libidn-debuginfo Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-7DDAFB24A3](https://patchblox.com/security/data/fix/linux/fedora-2026-7ddafb24a3.md) | Aug 2, 2026 | | Linux | mingw64-libidn-static Fedora 43 | 1.44-1.fc43 | [FEDORA-2026-7DDAFB24A3](https://patchblox.com/security/data/fix/linux/fedora-2026-7ddafb24a3.md) | Aug 2, 2026 | --- Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.