VULNERABILITY INTELLIGENCE
CVE-2026-6042
CVSS score3.3 LOW
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-04-10
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.
Weakness classification
- cna@vuldb.com: CWE-404