Vulnerability Details : CVE-2025-26519
musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.
Products affected by CVE-2025-26519
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2025-26519
0.01%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 1 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2025-26519
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.1
|
HIGH | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L |
N/A
|
N/A
|
MITRE | 2025-02-14 |
|
8.1
|
HIGH | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L |
1.4
|
6.0
|
MITRE | 2025-02-14 |
CWE ids for CVE-2025-26519
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by:
- 8254265b-2729-46b6-b9e3-3dfca2d5bfca (Primary)
- cve@mitre.org (Secondary)
References for CVE-2025-26519
-
https://www.openwall.com/lists/oss-security/2025/02/13/2
-
http://www.openwall.com/lists/oss-security/2025/02/13/3
oss-security - Re: [musl] CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
-
http://www.openwall.com/lists/oss-security/2025/02/13/5
oss-security - Re: [musl] CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
-
http://www.openwall.com/lists/oss-security/2025/02/13/4
oss-security - Re: [musl] CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
-
https://git.musl-libc.org/cgit/musl/commit/?id=c47ad25ea3b484e10326f933e927c0bc8cded3da
musl - musl - an implementation of the standard library for Linux-based systems
-
http://www.openwall.com/lists/oss-security/2025/02/14/6
-
http://www.openwall.com/lists/oss-security/2025/02/14/5
-
https://git.musl-libc.org/cgit/musl/commit/?id=e5adcd97b5196e29991b524237381a0202a60659
musl - musl - an implementation of the standard library for Linux-based systems
-
http://www.openwall.com/lists/oss-security/2025/02/13/2
oss-security - CVE-2025-26519: musl libc: input-controlled out-of-bounds write primitive in iconv()
Jump to