IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch

CVE-2026-4046iconv crash due to assertion failure with untrusted input

The GNU C Library glibc; Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP; Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP; Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP Veröffentlicht: (vor 7 Monaten)

Beschreibung

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

Schwachstellentyp (CWE): CWE-617

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
gnu glibc ≤ 2.43
The GNU C Library glibc 2.3.3 – ≤ 2.43
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP V3.1.5 – < V3.1.6
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP V3.1.5 – < V3.1.6
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP V3.1.5 – < V3.1.6

Referenzen und Patches

CPE-Treffer (NVD) (1)
  • cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* ≤ 2.43

Neue CVEs im selben Produkt — GNU C Library (glibc)

5.9Mittel
CVE-2026-122054

BIG-HKSCS decoding hang on crafted input

The GNU C Library glibc

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang.

3.7Niedrig
CVE-2026-97399

One-byte overread in strncasecmp on Power8

The GNU C Library glibc

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to th…

3.6Niedrig
CVE-2026-95818

AT_SECURE program buffer overflow via $ORIGIN processing

The GNU C Library glibc

A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs. When such a program's DT_RPATH or DT_RUNPATH beg…

6.3Mittel
CVE-2026-86805

AT_SECURE programs may load attacker-controlled code via $ORIGIN

The GNU C Library glibc

A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DT_RPATH for setuid/setgid (AT_SECURE) progr…