SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-58081

CRITICAL · CVSS 9.8 EPSS 0.36%

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Applications utilizing the affected encoding modules (HZ, UTF-7, VIQR, and ZW) in the iconv(3) library may be susceptible to buffer overflow vulnerabilities due to inadequate checks on the size of caller-supplied output buffers. This could lead to potential exploitation, allowing attackers to execute arbitrary code or cause denial of service. Developers and security teams managing applications that process untrusted input with these encodings should prioritize addressing this vulnerability to mitigate risks.

CVE
CVE-2026-58081
Severity
CRITICAL
CVSS
9.8
EPSS
0.36%

Original NVD Description

Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.

Related CVEs

Other vulnerabilities affecting the same vendor(s)