CVE-2026-6042
ADVISORY - nistSummary
A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.
EPSS Score: 0.00236 (0.148)
Common Weakness Enumeration (CWE)
Alpine
CREATED
UPDATED
ADVISORY IDCVE-2026-6042
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| alpine/musl | apk | alpine | 3.23 | <1.2.5-r22 | 1.2.5-r22 |
| alpine/musl | apk | alpine | 3.22 | <1.2.5-r11 | 1.2.5-r11 |
| alpine/musl | apk | alpine | 3.24 | <1.2.6-r1 | 1.2.6-r1 |
| alpine/musl | apk | alpine | 3.21 | <1.2.5-r10 | 1.2.5-r10 |
| alpine/musl | apk | alpine | 3.20 | <1.2.5-r2 | 1.2.5-r2 |
| alpine/musl | apk | alpine | 3.19 | <1.2.4_git20230717-r6 | 1.2.4_git20230717-r6 |
| alpine/musl | apk | alpine | edge | <1.2.6-r1 | 1.2.6-r1 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CVSS SCORE
4.8mediumDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-6042
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Ubuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-6042
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-