PT-2026-31904

CVE-2026-6042

Published

2026-04-10

Updated

2026-09-29

Description by

CVSS 3.1

8.1

High

MetricsAV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions musl libc versions up to 1.2.6

Description A security flaw exists in the iconv function within the GB18030 4-byte Decoder component of musl libc, specifically in the file src/locale/iconv.c. A manipulation of this function leads to inefficient algorithmic complexity. The attack requires local access.

Recommendations Deploy a patch to address this issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-407: Inefficient Algorithmic Complexity

CWE-404: Improper Resource Shutdown or Release

Related identifiers

CVE-2026-6042