ZeroDay Findings
Sign inSign up

Findings

CVE-2020-29562

The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the co…

Published Dec 4, 2020 · updated Oct 14, 2026 · gnu glibc

The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 4, 2020 · NIST NVD

    Detected

    The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

  2. Oct 14, 2026 · NIST NVD

    Updated

    The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Affected

  • cpe fedoraproject/fedora32
  • cpe gnu/glibcversion unspecified
  • cpe netapp/e-series santricity os controllerversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2020-29562

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2020-29562

    30-day exploitation probability 1.7%

    first.org
  • NIST NVDVulnerability recordCVE-2020-29562

    The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

    nvd.nist.gov

References