CyberRota Analysis
AI-GeneratedThe vulnerability arises from the ISO-2022 encoding module, which allocates a stack buffer of only 6 bytes for character output, while certain ISO-2022 variants can require up to 10 bytes, leading to potential stack buffer overflows. Applications utilizing the iconv(3) function to process untrusted input with these encoding modules are at risk. Developers and security teams managing applications that handle character encoding should prioritize addressing this vulnerability to mitigate the risk of exploitation.
Original NVD Description
The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.
Related CVEs
Other vulnerabilities affecting the same vendor(s)