PT-2026-29086 · Gnu · Gnu C Library

Rocket Ma · Published 2026-01-01 · Updated 2026-05-26 · CVE-2026-4046

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.43 and earlier

Description The iconv() function in the GNU C Library may experience a crash due to an assertion failure when processing inputs from the IBM1390 or IBM1399 character sets. This could potentially be exploited to remotely crash an application.

Recommendations Remove the IBM1390 and IBM1399 character sets from systems that do not require them.

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALSA-2026:20587

ALSA-2026:20594

BDU:2026-05928

CVE-2026-4046

ECHO-511D-493A-869E

OESA-2026-2031

OESA-2026-2032

OESA-2026-2033

OESA-2026-2034

OESA-2026-2035

OPENSUSE-SU-2026:10722-1

RHSA-2026:12740

SUSE-SU-2026:1498-1

SUSE-SU-2026:1501-1

Affected Products

Gnu C Library

References · 46

• https://errata.almalinux.org/10/ALSA-2026-20594.html · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-4046 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2034 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1498-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10722-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-4046 · Security Note
• https://bdu.fstec.ru/vul/2026-05928 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-4046 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:20587 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-20587.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:1501-1 · Vendor Advisory
• https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0007;hb=HEAD · Vendor Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=33980 · Patch
• https://ubuntu.com/security/CVE-2026-4046 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2032 · Vendor Advisory