https://seclists.org/oss-sec/2025/q1/136: [musl] CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
Published Feb 14, 2025
·Updated
Affected Software
2 affected components
musl musl libc
libxml2 libxml2
Frequently Asked Questions
1
What is the severity of CVE-2025-26519?
CVE-2025-26519 is classified as a high severity vulnerability due to the potential for input-controlled out-of-bounds writes.
2
How do I fix CVE-2025-26519?
To fix CVE-2025-26519, you should update musl libc to the latest patched version.
3
What is affected by CVE-2025-26519?
CVE-2025-26519 affects musl libc and any applications that utilize its iconv() function.
4
What are the potential impacts of CVE-2025-26519?
The potential impacts of CVE-2025-26519 include arbitrary code execution and instability in applications using musl libc.
5
How was CVE-2025-26519 discovered?
CVE-2025-26519 was discovered through basic fuzz testing methodologies.