---
id: CVE-2020-1751
title: >-
  An out-of-bounds write vulnerability was found in glibc before 2.31 when
  handling signal trampolines on PowerPC
summary: >-
  An out-of-bounds write vulnerability was found in glibc before 2.31 when
  handling signal trampolines on PowerPC. Specifically, the backtrace function
  did not properly check the array bounds when storing the frame address,
  resulting in a …
severity: medium
cvss: 5.1
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-787
  - CWE-787
vendor: gnu
product: glibc
affected:
  - glibc < 2.31
  - enterprise_linux = 8.0
  - ubuntu_linux = 16.04
  - ubuntu_linux = 18.04
  - ubuntu_linux = 19.10
patched:
  - glibc 2.31
published: '2020-04-17'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T09:17:18.640'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2020-1751'
references:
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751'
    label: secalert@redhat.com
  - url: 'https://security.gentoo.org/glsa/202006-04'
    label: secalert@redhat.com
  - url: 'https://security.netapp.com/advisory/ntap-20200430-0002/'
    label: secalert@redhat.com
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=25423'
    label: secalert@redhat.com
  - url: 'https://usn.ubuntu.com/4416-1/'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1751'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.gentoo.org/glsa/202006-04'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20200430-0002/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://sourceware.org/bugzilla/show_bug.cgi?id=25423'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://usn.ubuntu.com/4416-1/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-398330.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.00537
epssPercentile: 0.43715
ingestedAt: '2026-10-14T09:24:26.055Z'
---

## Overview

An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC. Specifically, the backtrace function did not properly check the array bounds when storing the frame address, resulting in a denial of service or potential code execution. The highest threat from this vulnerability is to system availability.

## Affected

- `glibc < 2.31`
- `enterprise_linux = 8.0`
- `ubuntu_linux = 16.04`
- `ubuntu_linux = 18.04`
- `ubuntu_linux = 19.10`

## Remediation

Upgrade past the affected range:

- `glibc 2.31`