CVE-2026-58081 — Heap based buffer overflow in iconv(3)
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An applic…
Published: 2026-08-19 · CVSS: 9.8 · CVSS 3.1
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7