https://seclists.org/oss-sec/2025/q1/128: [musl] CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
Published Feb 13, 2025
·Updated
Affected Software
1 affected component
musl musl libc
Frequently Asked Questions
1
What is the severity of CVE-2025-26519?
CVE-2025-26519 is considered a critical vulnerability due to its potential for causing out-of-bounds memory writes.
2
How do I fix CVE-2025-26519?
To fix CVE-2025-26519, update to the latest version of musl libc where the vulnerability has been patched.
3
What impact does CVE-2025-26519 have on my application?
CVE-2025-26519 can compromise the integrity and security of applications that process untrusted input via the iconv function.
4
Is my application vulnerable to CVE-2025-26519?
If your application uses musl libc's iconv function with untrusted input, it is likely vulnerable to CVE-2025-26519.
5
What should I do if I am unable to update due to CVE-2025-26519?
If an immediate update is not feasible, minimize exposure by ensuring that untrusted input is validated and sanitized before processing.