musl vulnerabilities

Products

• libc 1

Latest musl CVEs

Newest publication first

1. CVE-2026-6042 musl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexity

   Published 2026-04-10

   Medium·CVSS 4.8 EPSS 0.24%

   A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.