Loading HuntDB...

GHSA-22q4-f5r6-3xqw

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

Related CVEs

Key Information

GHSA ID
GHSA-22q4-f5r6-3xqw
Published
April 17, 2024 6:31 PM
Last Modified
February 13, 2025 6:32 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 10, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.