PT-2026-29086 · Gnu+2 · Gnu C Library+2

Rocket Ma · CVE-2026-4046 · Published 2026-01-01 · Updated 2026-07-27

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.43 and earlier

Description The iconv() function in the GNU C Library may experience a crash due to an assertion failure when processing inputs from the IBM1390 or IBM1399 character sets. This could potentially be exploited to remotely crash an application.

Recommendations Remove the IBM1390 and IBM1399 character sets from systems that do not require them.

Exploit

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALSA-2026:20587

ALSA-2026:20594

ALSA-2026:20597

BDU:2026-05928

CVE-2026-4046

ECHO-511D-493A-869E

OESA-2026-2031

OESA-2026-2032

OESA-2026-2033

OESA-2026-2034

OESA-2026-2035

OPENSUSE-SU-2026:10722-1

OPENSUSE-SU-2026:20764-1

RHSA-2026:12740

RHSA-2026:20587

RHSA-2026:20594

RHSA-2026:20597

SUSE-SU-2026:1498-1

SUSE-SU-2026:1501-1

SUSE-SU-2026:1662-1

SUSE-SU-2026:21317-1

SUSE-SU-2026:21395-1

SUSE-SU-2026:21424-1

SUSE-SU-2026:21682-1

SUSE-SU-2026:21688-1

SUSE-SU-2026:21751-1

SUSE-SU-2026:21780-1

SUSE-SU-2026:21807-1

SUSE-SU-2026:2231-1

SUSE-SU-2026:2333-1

SUSE-SU-2026:2440-1

SUSE-SU-2026:2465-1

USN-8611-1

Affected Products

Gnu C Library

Red Os

Rocky Linux

References · 86

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4046.json · Exploit
• https://ubuntu.com/security/CVE-2026-4046 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8611-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8611-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-4046 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21780-1 · Vendor Advisory
• https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-4438 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:20597 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:20587 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-20594.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:2333-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-4046 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-20597.html · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-20597.html · Vendor Advisory