CVE-2026-58081Critical buffer overflow in iconv (glibc)
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.
View on NVDAnalysis
Vulnerabilidad crítica en iconv (componente de glibc) que permite un desbordamiento de búfer al procesar ciertas codificaciones como UTF-7 o HZ. Cualquier aplicación que convierta datos de usuarios externos mediante iconv podría estar en riesgo de ejecución remota de código.
Relevant roles
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCWE-122EPSS
Technical description
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.