The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 30, 2026 · NIST NVD

   Detected

   The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

2. Jul 14, 2026 · NIST NVD

   Updated

   The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

Affected

• cpe gnu/glibcversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-4046

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-4046

  The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by rem

  nvd.nist.gov

References

• Reference · cert-portal.siemens.com
• Reference · inbox.sourceware.org
• Exploit · sourceware.org
• Third Party Advisory · sourceware.org