https://seclists.org/oss-sec/2025/q1/130: [musl] CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
Published Feb 13, 2025
·Updated
Affected Software
1 affected component
musl musl libc
Frequently Asked Questions
1
What is the severity of CVE-2025-26519?
CVE-2025-26519 has been classified as a high severity vulnerability due to its potential for causing out-of-bounds memory writes.
2
How do I fix CVE-2025-26519?
To fix CVE-2025-26519, update your musl libc to the latest version where this vulnerability has been patched.
3
What does CVE-2025-26519 affect?
CVE-2025-26519 specifically affects the iconv function within the musl libc implementation.
4
What are the potential attacks associated with CVE-2025-26519?
Exploitation of CVE-2025-26519 could lead to application crashes or the execution of arbitrary code due to out-of-bounds writes.
5
Is there a workaround for CVE-2025-26519 until a patch is applied?
Currently, it is recommended to avoid using the vulnerable iconv functionality in musl libc until the software is updated.