CVE-2026-58081
Heap based buffer overflow in iconv(3)
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted characters. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules.
| CWE | CWE-122 |
| Vendor | freebsd |
| Product | freebsd |
| Published | Aug 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for freebsd freebsd
Be the first to know when new unknown vulnerabilities affecting freebsd freebsd are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
FreeBSD / FreeBSD
15.1-RELEASE < p1 15.0-RELEASE < p11 14.4-RELEASE < p7 14.3-RELEASE < p16
References
Credits
Nick Wellnhofer Mark Johnston