High severity8.1NVD Advisory· Published Feb 14, 2025· Updated Jun 17, 2026

CVE-2025-26519

Description

musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Musl Libc/Musl3 versions
cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:musl-libc:musl:*:*:*:*:*:*:*:*range: >=0.9.13,<1.2.6
- (no CPE)range: >=0.9.13, <=1.2.5
- (no CPE)range: 0.9.13

Patches

Vulnerability mechanics

References

git.musl-libc.org/cgit/musl/commit/nvdPatch
git.musl-libc.org/cgit/musl/commit/nvdPatch
www.openwall.com/lists/oss-security/2025/02/13/2nvdMailing ListMitigationThird Party Advisory
www.openwall.com/lists/oss-security/2025/02/13/3nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2025/02/13/4nvdMailing ListMitigationThird Party Advisory
www.openwall.com/lists/oss-security/2025/02/13/5nvdMailing ListMitigationThird Party Advisory
www.openwall.com/lists/oss-security/2025/02/14/5nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2025/02/14/6nvdMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2025/02/13/2nvdMailing ListMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000