MEDIUM 5.9 NVD
CVE-2026-122054
Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may
Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang.
References
- https://sourceware.org/bugzilla/show_bug.cgi?id=25734
- https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0026
- http://www.openwall.com/lists/oss-security/2026/11/04/10
This medium severity vulnerability with a CVSS score of 5.9 was published on 2026-11-04 via NVD.
vulnfeed aggregates 18258 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.