CVE-2024-2961 — Vulnerability intelligence
gnu — glibc
Published:
- CVSS
- 7.3
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.