CVE-2021-3326

Name of the Vulnerable Software and Affected Versions GNU C Library (aka glibc or libc6) versions 2.32 and earlier

Description The iconv function in the GNU C Library, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Recommendations For GNU C Library (aka glibc or libc6) versions 2.32 and earlier, consider updating to a newer version to mitigate the risk of denial of service. As a temporary workaround, consider restricting the use of the iconv function when processing input sequences in the ISO-2022-JP-3 encoding until a patch is available.