{"id":"CVE-2024-2961","title":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or ove…","summary":"The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or ove…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","cvssSource":"adp","cwe":["CWE-787"],"vendor":"The GNU C Library","product":"glibc","affected":["glibc >= 2.1.93 < 2.40"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2024-05-01T00:00:00+00:00"},"exploitAvailable":true,"published":"2024-04-17","updated":"2026-10-15","sourceUpdated":"2026-10-15T00:25:24.488Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-2961","references":[{"url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/"},{"url":"http://www.openwall.com/lists/oss-security/2024/04/24/2"},{"url":"http://www.openwall.com/lists/oss-security/2024/04/17/9"},{"url":"http://www.openwall.com/lists/oss-security/2024/04/18/4"},{"url":"https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/2"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/6"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/1"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/4"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/5"},{"url":"http://www.openwall.com/lists/oss-security/2024/05/27/3"},{"url":"https://security.netapp.com/advisory/ntap-20240531-0002/"},{"url":"http://www.openwall.com/lists/oss-security/2024/07/22/5"}],"tags":["cve.org","exploit-available"],"epss":0.8833,"epssPercentile":0.99771,"exploits":{"github":16,"githubRepos":["https://github.com/mattaperkins/FIX-CVE-2024-2961","https://github.com/rvzsec/CVE-2024-2961","https://github.com/ambionics/cnext-exploits"],"metasploit":["exploit/linux/http/magento_xxe_to_glibc_buf_overflow"],"checkedAt":"2026-10-15T04:47:12.159Z"},"ingestedAt":"2026-10-15T04:46:37.300Z","slug":"CVE-2024-2961","body":"## Overview\n\nThe iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.\n\n## Affected\n\n- `glibc >= 2.1.93 < 2.40`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":70,"depthScoreParts":{"impact":40.2,"likelihood":17.7,"exploitation":12,"ransomware":0},"changes":[]}