CVE-2026-58081Desbordamiento de búfer crítico en iconv (glibc)
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.
Ver en NVDAnálisis
Vulnerabilidad crítica en iconv (componente de glibc) que permite un desbordamiento de búfer al procesar ciertas codificaciones como UTF-7 o HZ. Cualquier aplicación que convierta datos de usuarios externos mediante iconv podría estar en riesgo de ejecución remota de código.
Roles relevantes
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCWE-122EPSS
Descripción técnica
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.