https://seclists.org/oss-sec/2025/q1/127: CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
Published Feb 13, 2025
·Updated
Affected Software
1 affected component
musl libc
Frequently Asked Questions
1
What is the severity of CVE-2025-26519?
CVE-2025-26519 has a severity rating that indicates a significant potential for security risk due to memory corruption.
2
How do I fix CVE-2025-26519?
To fix CVE-2025-26519, update musl libc to the latest version that addresses this vulnerability.
3
What types of applications are affected by CVE-2025-26519?
Applications that use musl libc's iconv function and process untrusted input with input-controlled charset conversions are affected.
4
What are the potential consequences of CVE-2025-26519?
The potential consequences of CVE-2025-26519 include application crashes, data corruption, or arbitrary code execution leading to system compromise.
5
Is there a workaround for CVE-2025-26519?
A potential workaround for CVE-2025-26519 is to avoid processing untrusted input with iconv until an update is applied.