← Back

CVE-2026-4046

nvd nist
Published: Mar 30, 2026Modified: Jul 14, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

Affected (1)

Products: Gnu: Glibc
Gnu
1 product
Glibc
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Glibc
Up to 2.43

Related CWEs

CWE-617
Reachable Assertion
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (4)

Source: 3ff69d7a-14f2-4f67-a097-88dee7810d18
Source: 3ff69d7a-14f2-4f67-a097-88dee7810d18
ExploitIssue TrackingPatch
Source: 3ff69d7a-14f2-4f67-a097-88dee7810d18
Third Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.