- Description
- musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.
- Source
- cve@mitre.org
- NVD status
- Analyzed
- Products
- musl
CVSS 3.1
- Type
- Primary
- Base score
- 7
- Impact score
- 5.9
- Exploitability score
- 1
- Vector string
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- cve@mitre.org
- CWE-787
- Hype score
- Not currently trending
CVE-2025-26519 Exposes Applications Using musl libc to Remote Code Execution Explore the details of CVE-2025-26519, a serious vulnerability in musl libc that allows arbitrary code execution on systems https://t.co/L6Hb08CwaK
@the_yellow_fall
19 Feb 2025
408 Impressions
2 Retweets
7 Likes
2 Bookmarks
0 Replies
0 Quotes
Security Advisory (CVE-2025-26519) for musl libc: https://t.co/qhvUN1Silv All users running applications which use iconv with untrusted input (see link for details of what usage is affected) should patch ASAP.
@gnutools
17 Feb 2025
34 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2025-26519 🔴 HIGH (8.1) 🏢 musl-libc - musl 🏗️ 0.9.13 🔗 https://t.co/cxaqiY76cM 🔗 https://t.co/9pSdHQQNgk 🔗 https://t.co/T733mNELMe #CyberCron #VulnAlert https://t.co/2dqRdPoKLP
@cybercronai
16 Feb 2025
23 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-26519 musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8. https://t.co/P0Jp2tgo2s
@CVEnew
14 Feb 2025
510 Impressions
1 Retweet
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv() https://t.co/2miucSNnjS
@jedisct1
13 Feb 2025
83 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv() https://t.co/Cwq2Wpe9Fj
@andersonc0d3
13 Feb 2025
176 Impressions
0 Retweets
2 Likes
2 Bookmarks
0 Replies
0 Quotes
CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv() https://t.co/YNDQehMiEA for the vulnerability to be exposed, an application must call iconv_open with output encoding UTF-8 and input encoding EUC-KR and must subsequently process untrusted input
@oss_security
13 Feb 2025
1365 Impressions
5 Retweets
12 Likes
3 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49F68D79-2A07-484F-97E2-CF71F976D151",
"versionEndExcluding": "1.2.6",
"versionStartIncluding": "0.9.13"
}
],
"operator": "OR"
}
]
}
]