CVE-2026-58081

Name of the Vulnerable Software and Affected Versions iconv(3) (affected versions not specified)

Description Several encoding modules, including HZ, UTF-7, VIQR, and ZW, fail to properly validate the size of the output buffer provided by the caller before writing converted characters. This can lead to heap-based buffer overflows—a condition where data exceeds the allocated memory boundary—when an application uses the iconv(3) function to convert untrusted input to or from these specific encodings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.