Vulnerability Description
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Glibc | <= 2.43 |
Related Weaknesses (CWE)
References
- https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@
- https://sourceware.org/bugzilla/show_bug.cgi?id=33980ExploitIssue TrackingPatch
- https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-Third Party Advisory
FAQ
What is CVE-2026-4046?
CVE-2026-4046 is a vulnerability with a CVSS score of 7.5 (HIGH). The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remote...
How severe is CVE-2026-4046?
CVE-2026-4046 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-4046?
Check the references section above for vendor advisories and patch information. Affected products include: Gnu Glibc.