---
id: CVE-2024-2961
title: >-
  The iconv() function in the GNU C Library versions 2.39 and older may overflow
  the output buffer passed to it by up to 4 bytes when converting strings to the
  ISO-2022-CN-EXT character set, which may be used to crash an application or
  ove…
summary: >-
  The iconv() function in the GNU C Library versions 2.39 and older may overflow
  the output buffer passed to it by up to 4 bytes when converting strings to the
  ISO-2022-CN-EXT character set, which may be used to crash an application or
  ove…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H'
cvssSource: adp
cwe:
  - CWE-787
vendor: The GNU C Library
product: glibc
affected:
  - glibc >= 2.1.93 < 2.40
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-05-01T00:00:00+00:00'
exploitAvailable: true
published: '2024-04-17'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T00:25:24.488Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-2961'
references:
  - url: >-
      https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P3I4KYS6EU6S7QZ47WFNTPVAHFIUQNEL/
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YAMJQI3Y6BHWV3CUTYBXOZONCUJNOB2Z/
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BTJFBGHDYG5PEIFD5WSSSKSFZ2AZWC5N/
  - url: 'http://www.openwall.com/lists/oss-security/2024/04/24/2'
  - url: 'http://www.openwall.com/lists/oss-security/2024/04/17/9'
  - url: 'http://www.openwall.com/lists/oss-security/2024/04/18/4'
  - url: 'https://lists.debian.org/debian-lts-announce/2024/05/msg00001.html'
  - url: 'http://www.openwall.com/lists/oss-security/2024/05/27/2'
  - url: 'http://www.openwall.com/lists/oss-security/2024/05/27/6'
  - url: 'http://www.openwall.com/lists/oss-security/2024/05/27/1'
  - url: 'http://www.openwall.com/lists/oss-security/2024/05/27/4'
  - url: 'http://www.openwall.com/lists/oss-security/2024/05/27/5'
  - url: 'http://www.openwall.com/lists/oss-security/2024/05/27/3'
  - url: 'https://security.netapp.com/advisory/ntap-20240531-0002/'
  - url: 'http://www.openwall.com/lists/oss-security/2024/07/22/5'
tags:
  - cve.org
  - exploit-available
epss: 0.8833
epssPercentile: 0.99771
exploits:
  github: 16
  githubRepos:
    - 'https://github.com/mattaperkins/FIX-CVE-2024-2961'
    - 'https://github.com/rvzsec/CVE-2024-2961'
    - 'https://github.com/ambionics/cnext-exploits'
  metasploit:
    - exploit/linux/http/magento_xxe_to_glibc_buf_overflow
  checkedAt: '2026-10-15T04:47:12.159Z'
ingestedAt: '2026-10-15T04:46:37.300Z'
---

## Overview

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.

## Affected

- `glibc >= 2.1.93 < 2.40`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.