CVE-2026-4046

Katalog CVE

CVSS 7.5 · High EPSS 0,66%

Kerentanan Reachable Assertion pada gnu glibc. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,66% peluang dieksploitasi; lebih tinggi dari 50,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sourceware.org/bugzilla/show_bug.cgi?id=33980 exploit · issue tracking · patch
• https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD advisory pihak ketiga
• https://inbox.sourceware.org/libc-announce/76814edf-cf7f-47ec-979d-2dce0a2c76bf@gotplt.org/T/#u
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html