Memory disclosure or crash via positional parameter overflow

Integer overflow in GNU C Library wordexp through 2.33 allows attackers to read arbitrary memory or crash a calling process via crafted input. In posix/wordexp.c, parse_param converts an untrusted positional parameter with atoi, so an oversized decimal value overflows before it is compared with the argument count. Exposure depends on an application passing attacker-controlled patterns to wordexp; the bounded consequences are memory disclosure or interruption of that process.