ZeroDay Findings
Sign inSign up

Findings

CVE-2021-3326

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertio…

Published Jan 27, 2021 · updated Oct 14, 2026 · gnu glibc

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 27, 2021 · NIST NVD

    Detected

    The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

  2. Oct 14, 2026 · NIST NVD

    Updated

    The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

Affected

  • cpe fujitsu/m10-1 firmwareversion unspecified
  • cpe fujitsu/m10-4 firmwareversion unspecified
  • cpe fujitsu/m10-4s firmwareversion unspecified
  • cpe fujitsu/m12-1 firmwareversion unspecified
  • cpe fujitsu/m12-2 firmwareversion unspecified
  • cpe fujitsu/m12-2s firmwareversion unspecified
  • cpe gnu/glibcversion unspecified
  • cpe netapp/e-series santricity os controllerversion unspecified
  • cpe netapp/ontap select deploy administration utilityversion unspecified
  • cpe oracle/communications cloud native core security edge protection proxy1.5.0

Sources

  • CVE.orgVulnerability recordCVE-2021-3326

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-3326

    30-day exploitation probability 3.8%

    first.org
  • NIST NVDVulnerability recordCVE-2021-3326

    The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

    nvd.nist.gov

References