Medium severity5.5NVD Advisory· Published Nov 24, 2020· Updated Jun 17, 2026
CVE-2020-28928
CVE-2020-28928
Description
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:oracle:graalvm:20.3.2:*:*:*:enterprise:*:*:*+ 1 more
- cpe:2.3:a:oracle:graalvm:20.3.2:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oracle:graalvm:21.1.0:*:*:*:enterprise:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- musl libc/musl libcdescription
Patches
Vulnerability mechanics
References
10- www.oracle.com//security-alerts/cpujul2021.htmlnvdPatchThird Party Advisory
- www.oracle.com/security-alerts/cpuoct2021.htmlnvdPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2020/11/20/4nvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/11/msg00050.htmlnvdMailing ListThird Party Advisory
- musl.libc.org/releases.htmlnvdRelease NotesVendor Advisory
- lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3Envd
- lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3Envd
- lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3Envd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/nvd
News mentions
0No linked articles in our index yet.