PT-2026-31904 · Musl · Libc

0X001 · Published 2026-04-10 · Updated 2026-04-10 · CVE-2026-6042

NVD

CVSS v2.0

1.7

Low

AV:L/AC:L/Au:S/C:N/I:N/A:P

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.

Fix

Improper Resource Release

Weakness Enumeration

CWE-407

CWE-404

Related Identifiers

CVE-2026-6042

Affected Products

Libc

References · 8

• https://openwall.com/lists/oss-security/2026/04/03/2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-6042 · Security Note
• https://vuldb.com/vuln/356620/cti · Note
• https://openwall.com/lists/oss-security/2026/04/02/10 · Note
• https://twitter.com/CVEnew/status/2042561710620602703 · Twitter Post
• https://vuldb.com/vuln/356620 · Note
• http://openwall.com/lists/oss-security/2026/04/09/19 · Note
• https://vuldb.com/submit/796352 · Note