Stack based buffer overflow in iconv(3)
Summary
| CVE | CVE-2026-58082 |
|---|---|
| State | PUBLISHED |
| Assigner | freebsd |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-08-19 08:17:12 UTC |
| Updated | 2026-08-31 19:02:19 UTC |
| Description | The ISO-2022 encoding module used a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output. Some ISO-2022 variants can require up to 10 bytes per character, in which case conversions can trigger a stack buffer overflow of up to four bytes. An application that uses iconv(3) to convert untrusted input to or from one of the affected encodings may be vulnerable to buffer overflows if it uses one of the affected encoding modules. |
Risk And Classification
Primary CVSS: v3.1 9.8 CRITICAL from ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.003630000 probability, percentile 0.292710000 (date 2026-09-01)
Problem Types: CWE-121 | CWE-121 CWE-121: Stack-based Buffer Overflow
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | DECLARED | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 9.8 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Freebsd | Freebsd | 14.3 | - | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p1 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p10 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p11 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p12 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p13 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p14 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p15 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p2 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p3 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p4 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p5 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p6 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p7 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p8 | All | All |
| Operating System | Freebsd | Freebsd | 14.3 | p9 | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | - | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | p1 | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | p2 | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | p3 | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | p4 | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | p5 | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | p6 | All | All |
| Operating System | Freebsd | Freebsd | 14.4 | rc1 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | - | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p1 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p10 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p2 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p3 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p4 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p5 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p6 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p7 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p8 | All | All |
| Operating System | Freebsd | Freebsd | 15.0 | p9 | All | All |
| Operating System | Freebsd | Freebsd | 15.1 | - | All | All |
| Operating System | Freebsd | Freebsd | 15.1 | rc2 | All | All |
| Operating System | Freebsd | Freebsd | 15.1 | rc3-p1 | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | FreeBSD | FreeBSD | affected 15.1-RELEASE p1 release | Not specified |
| CNA | FreeBSD | FreeBSD | affected 15.0-RELEASE p11 release | Not specified |
| CNA | FreeBSD | FreeBSD | affected 14.4-RELEASE p7 release | Not specified |
| CNA | FreeBSD | FreeBSD | affected 14.3-RELEASE p16 release | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| security.freebsd.org/advisories/FreeBSD-SA-26:49.iconv.asc | [email protected] | security.freebsd.org | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Nick Wellnhofer (en)
CNA: Mark Johnston (en)
There are currently no legacy QID mappings associated with this CVE.