CVE-2026-4046

CVE-2026-4046: iconv crash due to assertion failure with untrusted input

Vendor The Gnu C Library
Product glibc
Weakness CWE-617
Published March 30, 2026
Last update April 20, 2026

CVSS base score

What the vulnerability does

01Description

The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an application. This vulnerability can be trivially mitigated by removing the IBM1390 and IBM1399 character sets from systems that do not need them.

Key dates

02Disclosure timeline

March 30, 2026 CVE published
April 20, 2026 Record updated