> CVE-2026-58081

« BACK_TO_HOME
PUBLISHED
2026-08-19 08:17
MODIFIED
2026-08-19 08:17
EPSS (Prob. Exploit)
0.52%
Top 56.7%
DATA SOURCES:
NVD 🔗 2026-08-19 CWE MITRE 🔗 2026-09-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-122

> CWE DETAILED DESCRIPTIONS

CWE-122: Heap-based Buffer Overflow - A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

> HISTORIQUE DES MODIFICATIONS

Première apparition
19/08/2026 08:17
Source: NVD
📊 ENRICHISSEMENT 01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-122: Heap-based Buffer Overflow - A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the bu...
Total des modifications: 1 Dernière mise à jour: 1 month ago

> REFERENCES

https://security.freebsd.org/advisories/FreeBSD-SA-26:49.iconv.asc
« BACK_TO_HOME