High
Security advisory
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-2961
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 00:01 UTC · Revision 1
Source evidence
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
osv:CVE-2024-2961
Complete source record
{
"id": "eadb4a98485e01fc84437b98130a2eacca5eb4b8744ff6845664996c6cfeeefb",
"url": "https://osv.dev/vulnerability/CVE-2024-2961",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2024-2961",
"summary": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.",
"evidence": "osv:CVE-2024-2961",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2024-2961",
"aliases": [
"CVE-2024-2961"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/bminor/glibc",
"type": "GIT",
"events": [
{
"introduced": "3d784d830015dcb614bf2d154e726e67bd10ea32"
},
{
"fixed": "3d1aed874918c466a4477af1da35983ab036690e"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.93"
},
{
"fixed": "2.40"
}
],
"source": "CPE_RANGE"
}
]
}
},
{
"repo": "https://sourceware.org/git/glibc.git",
"type": "GIT",
"events": [
{
"introduced": "3d784d830015dcb614bf2d154e726e67bd10ea32"
},
{
"fixed": "3d1aed874918c466a4477af1da35983ab036690e"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "2.1.93"
},
{
"fixed": "2.40"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"cpe": "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.1.93"
},
{
"fixed": "2.40"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"glibc-2.39.9000",
"glibc-2.39",
"glibc-2.38",
"glibc-2.38.9000",
"glibc-2.37",
"glibc-2.37.9000",
"glibc-2.36",
"glibc-2.36.9000",
"glibc-2.35",
"glibc-2.35.9000",
"glibc-2.34",
"glibc-2.34.9000",
"glibc-2.33",
"glibc-2.33.9000",
"glibc-2.32",
"glibc-2.32.9000",
"glibc-2.31",
"glibc-2.31.9000",
"changelog-ends-here",
"glibc-2.30",
"glibc-2.30.9000",
"glibc-2.29",
"glibc-2.29.9000",
"glibc-2.28",
"glibc-2.28.9000",
"glibc-2.27",
"glibc-2.27.9000",
"glibc-2.26",
"glibc-2.26.9000",
"glibc-2.25",
"glibc-2.25.90",
"glibc-2.24",
"glibc-2.24.90",
"glibc-2.23",
"glibc-2.23.90",
"glibc-2.22",
"glibc-2.22.90",
"glibc-2.21",
"glibc-2.21.90",
"glibc-2.20",
"glibc-2.20.90",
"glibc-2.19",
"glibc-2.19.90",
"glibc-2.18",
"glibc-2.18.90",
"glibc-2.17",
"glibc-2.17.90",
"glibc-2.16.0",
"glibc-2.16.90",
"glibc-2.16-ports-merge",
"glibc-2.16",
"glibc-2.16-tps",
"glibc-2.15",
"glibc-2.14.9000",
"glibc-2.14",
"glibc-2.13",
"glibc-2.12",
"glibc-2.11",
"cvs/glibc-2_8-base",
"cvs/fedora-glibc-20090510T1842",
"glibc-2.10",
"cvs/glibc-2_10-base",
"cvs/glibc-2_10",
"cvs/fedora-glibc-20090509T2200",
"cvs/fedora-glibc-20090509T1828",
"cvs/fedora-glibc-20090427T1419",
"cvs/fedora-glibc-20090424T1908",
"cvs/fedora-glibc-20090424T0747",
"cvs/fedora-glibc-20090416T1610",
"cvs/fedora-glibc-20090416T0610",
"cvs/fedora-glibc-20090415T1619",
"cvs/fedora-glibc-20090414T2104",
"cvs/fedora-glibc-20090409T1422",
"cvs/fedora-glibc-20090408T1602",
"cvs/fedora-glibc-20090407T0657",
"cvs/fedora-glibc-20090407T0545",
"cvs/fedora-glibc-20090401T0935",
"cvs/fedora-glibc-20090320T1944",
"cvs/fedora-glibc-20090310T1925",
"cvs/fedora-glibc-20090309T1421",
"cvs/fedora-glibc-20090218T1534",
"cvs/fedora-glibc-20090204T2135",
"cvs/fedora-glibc-20090108T1017",
"cvs/fedora-glibc-20090108T0952",
"cvs/fedora-glibc-20090102T2110",
"cvs/fedora-glibc-20090102T2040",
"cvs/fedora-glibc-20090102T0809",
"glibc-2.9",
"cvs/glibc-2_9-base",
"cvs/glibc-2_9",
"cvs/fedora-glibc-20081113T2206",
"cvs/fedora-glibc-20081112T2008",
"cvs/fedora-glibc-20081031T2102",
"cvs/fedora-glibc-20081028T1533",
"cvs/fedora-glibc-20081019T1815",
"cvs/fedora-glibc-20080828T1623",
"cvs/fedora-glibc-20080802T0809",
"cvs/fedora-glibc-20080728T2320",
"cvs/fedora-glibc-20080716T0944",
"cvs/fedora-glibc-20080703T1203",
"cvs/fedora-glibc-20080613T1601",
"cvs/fedora-glibc-20080612T1619",
"cvs/fedora-glibc-20080524T2218",
"cvs/fedora-glibc-20080520T1924",
"cvs/fedora-glibc-20080518T1017",
"cvs/fedora-glibc-20080516T2152",
"cvs/fedora-glibc-20080515T0735",
"glibc-2.8",
"cvs/glibc-2_8",
"cvs/fedora-glibc-20080412T0741",
"cvs/fedora-glibc-20080411T1934",
"cvs/fedora-glibc-20080410T1907",
"cvs/fedora-glibc-20080408T0706",
"cvs/fedora-glibc-20080328T1347",
"cvs/fedora-glibc-20080326T1041",
"cvs/fedora-glibc-20080314T2159",
"cvs/fedora-glibc-20080314T1732",
"cvs/fedora-glibc-20080310T1651",
"cvs/fedora-glibc-20080305T0857",
"cvs/fedora-glibc-20080216T1726",
"cvs/fedora-glibc-20080201T1017",
"cvs/fedora-glibc-20080131T0821",
"cvs/fedora-glibc-20080111T0737",
"cvs/fedora-glibc-20080103T1958",
"cvs/fedora-glibc-20071227T0908",
"cvs/fedora-glibc-20071212T1953",
"cvs/fedora-glibc-20071212T1051",
"glibc-2.7",
"cvs/glibc-2_7-base",
"cvs/glibc-2_7",
"cvs/fedora-glibc-20071017T2029",
"cvs/fedora-glibc-20071017T2007",
"cvs/fedora-glibc-20071015T0728",
"cvs/fedora-glibc-20071014T2102",
"cvs/fedora-glibc-20071014T1847",
"cvs/fedora-glibc-20071011T1636",
"cvs/fedora-glibc-20071010T2047",
"cvs/fedora-glibc-20071003T1908",
"cvs/fedora-glibc-20070929T1859",
"cvs/fedora-glibc-20070920T0007",
"cvs/fedora-glibc-20070918T1931",
"cvs/fedora-glibc-20070827T2032",
"cvs/fedora-glibc-20070825T1839",
"cvs/fedora-glibc-20070816T2121",
"cvs/fedora-glibc-20070815T2049",
"cvs/fedora-glibc-20070814T0725",
"cvs/fedora-glibc-20070814T0643",
"cvs/fedora-glibc-20070810T2152",
"cvs/fedora-glibc-20070809T0939",
"cvs/fedora-glibc-20070804T2027",
"cvs/fedora-glibc-20070801T1703",
"cvs/fedora-glibc-20070731T1624",
"cvs/fedora-glibc-20070515T2025",
"glibc-2.6",
"cvs/glibc-2_6-base",
"cvs/glibc-2_6",
"cvs/fedora-glibc-20070510T2308",
"cvs/fedora-glibc-20070510T2304",
"cvs/fedora-glibc-20070510T0634",
"cvs/fedora-glibc-20070504T0917",
"cvs/fedora-glibc-20070416T2350",
"cvs/fedora-glibc-20070331T1609",
"cvs/fedora-glibc-20070317T2130",
"cvs/fedora-glibc-20070221T1011",
"cvs/fedora-glibc-20070211T1607",
"cvs/fedora-glibc-20070202T0923",
"cvs/fedora-glibc-20070117T1043",
"cvs/fedora-glibc-20070117T0857",
"cvs/fedora-glibc-20061219T1804",
"cvs/fedora-glibc-20061214T0850",
"cvs/fedora-glibc-20061210T1006",
"cvs/fedora-glibc-20061205T2141",
"cvs/fedora-glibc-20061201T0821",
"cvs/fedora-glibc-20061130T1652",
"cvs/fedora-glibc-20061128T1037",
"cvs/fedora-glibc-20061120T1000",
"cvs/fedora-glibc-20061110T2049",
"cvs/fedora-glibc-20061110T1956",
"cvs/fedora-glibc-20061109T2048",
"cvs/fedora-glibc-20061109T1949",
"cvs/fedora-glibc-20061103T1610",
"cvs/fedora-glibc-20061029T2155",
"cvs/fedora-glibc-20061027T1902",
"cvs/fedora-glibc-20061025T1857",
"cvs/fedora-glibc-2_5-20061008T1257",
"cvs/fedora-glibc-2_5-20061008T1253",
"cvs/glibc-2_5-base",
"cvs/fedora-glibc-20061002T1858",
"glibc-2.5",
"cvs/glibc-2_5",
"cvs/fedora-glibc-20060929T2037",
"cvs/fedora-glibc-20060925T1535",
"cvs/fedora-glibc-20060923T0946",
"cvs/fedora-glibc-20060919T1847",
"cvs/fedora-glibc-20060919T1816",
"cvs/fedora-glibc-20060915T0943",
"cvs/fedora-glibc-20060910T1832",
"cvs/fedora-glibc-20060907T0853",
"cvs/fedora-glibc-20060905T0633",
"cvs/fedora-glibc-20060831T1812",
"cvs/fedora-glibc-20060831T0640",
"cvs/fedora-glibc-20060828T1903",
"cvs/fedora-glibc-20060825T0639",
"cvs/fedora-glibc-20060822T0706",
"cvs/fedora-glibc-20060815T2033",
"cvs/fedora-glibc-20060815T0533",
"cvs/fedora-glibc-20060810T0627",
"cvs/fedora-glibc-20060807T1859",
"cvs/fedora-glibc-20060802T1808",
"cvs/fedora-glibc-20060802T1650",
"cvs/fedora-glibc-20060731T0706",
"cvs/fedora-glibc-20060729T2255",
"cvs/fedora-glibc-20060710T2206",
"cvs/fedora-glibc-20060630T0858",
"cvs/fedora-glibc-20060531T1322",
"cvs/fedora-glibc-20060524T0721",
"cvs/fedora-glibc-20060521T2153",
"cvs/fedora-glibc-20060519T1550",
"cvs/fedora-glibc-20060511T1325",
"cvs/fedora-glibc-20060505T1443",
"cvs/fedora-glibc-20060505T0554",
"cvs/fedora-glibc-20060501T0751",
"cvs/fedora-glibc-20060427T2122",
"cvs/fedora-glibc-20060426T2000",
"cvs/fedora-glibc-20060425T0903",
"cvs/fedora-glibc-20060424T2027",
"cvs/fedora-glibc-20060424T0820",
"cvs/fedora-glibc-20060328T0900",
"glibc-2.4",
"cvs/glibc-2_4",
"cvs/fedora-glibc-20060306T1239",
"cvs/fedora-glibc-20060306T0720",
"cvs/fedora-glibc-20060302T0855",
"cvs/fedora-glibc-20060301T0647",
"cvs/fedora-glibc-20060217T1609",
"cvs/fedora-glibc-20060213T0650",
"cvs/fedora-glibc-20060204T0758",
"cvs/fedora-glibc-20060203T0932",
"cvs/fedora-glibc-20060202T0507",
"cvs/fedora-glibc-20060201T0846",
"cvs/fedora-glibc-20060130T0922",
"cvs/fedora-glibc-20060109T2152",
"cvs/fedora-glibc-20060106T2148",
"cvs/fedora-glibc-20060106T0916",
"cvs/fedora-glibc-20060104T0754",
"cvs/fedora-glibc-20060102T2114",
"cvs/fedora-glibc-20060102T1045",
"cvs/fedora-glibc-20051227T1426",
"cvs/fedora-glibc-20051221T0931",
"cvs/fedora-glibc-20051220T1751",
"cvs/fedora-glibc-20051220T1028",
"cvs/fedora-glibc-20051219T1003",
"cvs/fedora-glibc-20051119T1959",
"cvs/fedora-glibc-20051116T0829",
"cvs/fedora-glibc-20051115T0809",
"cvs/fedora-glibc-2_3-20051023T0123",
"cvs/fedora-glibc-20051020T0651",
"cvs/fedora-glibc-2_3-20051017T0259",
"cvs/fedora-glibc-20051010T1417",
"cvs/fedora-glibc-20051003T2040",
"cvs/fedora-glibc-20050912T0656",
"cvs/fedora-glibc-20050829T1854",
"cvs/fedora-glibc-20050824T0705",
"cvs/fedora-glibc-20050822T0727",
"cvs/fedora-glibc-20050808T2126",
"cvs/fedora-glibc-20050729T1531",
"cvs/fedora-glibc-20050725T0627",
"cvs/fedora-glibc-20050722T0433",
"cvs/fedora-glibc-20050721T0814",
"cvs/fedora-glibc-20050708T0811",
"cvs/fedora-glibc-20050627T0850",
"cvs/fedora-glibc-20050620T1530",
"cvs/fedora-glibc-20050620T1522",
"cvs/fedora-glibc-20050524T1606",
"cvs/fedora-glibc-20050523T1354",
"cvs/fedora-glibc-20050520T0919",
"cvs/fedora-glibc-20050504T1818",
"cvs/fedora-glibc-20050504T0728",
"cvs/fedora-glibc-20050503T0852",
"cvs/fedora-glibc-20050428T0846",
"cvs/fedora-glibc-20050427T1912",
"cvs/fedora-glibc-2_3-20050704T1133",
"cvs/fedora-glibc-20050427T1043",
"cvs/fedora-glibc-20050415T0909",
"cvs/fedora-glibc-2_3-20050406T0344",
"cvs/fedora-glibc-2_3-20050406T0312",
"cvs/fedora-glibc-20050405T2114",
"cvs/fedora-glibc-20050401T1444",
"cvs/fedora-glibc-20050324T0715",
"cvs/fedora-glibc-20050319T1907",
"cvs/fedora-glibc-20050303T1335",
"cvs/fedora-glibc-20050302T1820",
"cvs/fedora-glibc-2_3-20050226T0141",
"cvs/fedora-glibc-20050211T1037",
"cvs/fedora-glibc-20050211T0853",
"cvs/fedora-glibc-20050208T2213",
"cvs/fedora-glibc-20050208T0948",
"cvs/fedora-glibc-20050106T2203",
"cvs/fedora-glibc-20050106T1443",
"cvs/glibc-2_3-base",
"cvs/fedora-glibc-20041219T2331",
"cvs/fedora-glibc-20041218T2312",
"cvs/fedora-glibc-20041218T1131",
"cvs/fedora-glibc-20041217T0906",
"cvs/fedora-glibc-20041215T2056",
"cvs/fedora-glibc-20041215T0847",
"cvs/fedora-glibc-20041214T1058",
"cvs/fedora-glibc-20041213T2323",
"cvs/fedora-glibc-20041210T0634",
"cvs/fedora-glibc-20041208T1024",
"cvs/fedora-glibc-20041207T1331",
"cvs/fedora-glibc-20041203T0935",
"cvs/fedora-glibc-20041130T0624",
"cvs/fedora-glibc-20041126T1318",
"cvs/fedora-glibc-20041124T0741",
"cvs/fedora-glibc-20041121T1116",
"cvs/fedora-glibc-20041120T0949",
"cvs/fedora-glibc-20041119T0003",
"cvs/fedora-glibc-20041116T0856",
"cvs/fedora-glibc-20041115T0915",
"cvs/fedora-glibc-20041112T1640",
"cvs/fedora-glibc-20041110T0839",
"cvs/fedora-glibc-20041102T1153",
"cvs/fedora-glibc-20041021T0701",
"cvs/fedora-glibc-20041020T1016",
"cvs/fedora-glibc-20041018T2320",
"cvs/fedora-glibc-20041018T0940",
"cvs/fedora-glibc-20041014T0548",
"cvs/fedora-glibc-20041012T1128",
"cvs/fedora-glibc-20041006T0900",
"cvs/fedora-glibc-20041005T0745",
"cvs/fedora-glibc-20041004T0747",
"cvs/fedora-glibc-20041001T2134",
"cvs/fedora-glibc-20041001T1134",
"cvs/fedora-glibc-20040930T0838",
"cvs/fedora-glibc-20040929T0821",
"cvs/fedora-glibc-20040927T0611",
"cvs/fedora-glibc-20040926T0823",
"cvs/fedora-glibc-20040925T0738",
"cvs/fedora-glibc-20040923T0148",
"cvs/fedora-base",
"cvs/ChangeLog",
"glibc-2.3.3",
"cvs/glibc-2_3_3",
"glibc-2.3.2",
"cvs/glibc-2_3_2",
"cvs/initial",
"glibc-2.3.1",
"cvs/glibc-2-3-1",
"glibc-2.3",
"cvs/glibc-2-3",
"glibc-2.2.4",
"cvs/glibc-2_2_4",
"cvs/post-lgplv2_1",
"cvs/pre-lgplv2_1",
"glibc-2.2.3",
"cvs/glibc-2_2_3",
"glibc-2.2.2",
"cvs/glibc-2_2_2",
"glibc-2.2.1",
"cvs/glibc-2_2_1",
"glibc-2.2",
"cvs/glibc-2_2",
"glibc-2.1.97",
"cvs/glibc-2_1_97",
"glibc-2.1.96",
"cvs/glibc-2_1_96",
"glibc-2.1.95",
"cvs/libc-2_1_95",
"glibc-2.1.94",
"cvs/libc-2_1_94",
"glibc-2.1.93",
"cvs/glibc-2_1_93",
"glibc-2.6.9000"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-2961.json"
}
}
],
"modified": "2026-10-28T02:30:40.494177765Z",
"provider": "osv",
"references": [
"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",
"https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/",
"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2961.json",
"https://nvd.nist.gov/vuln/detail/CVE-2024-2961",
"https://security.netapp.com/advisory/ntap-20240531-0002/",
"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004",
"https://www.ambionics.io/blog/iconv-cve-2024-2961-p1",
"https://www.ambionics.io/blog/iconv-cve-2024-2961-p2",
"https://www.ambionics.io/blog/iconv-cve-2024-2961-p3"
],
"provider_metadata": {
"cwe_ids": [
"CWE-787"
],
"cna_assigner": "glibc",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/2xxx/CVE-2024-2961.json"
}
},
"related_cves": [
{
"value": "CVE-2024-2961",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 508215,
"published_at": "2024-04-17T17:27:40.541+00:00"
}