Report

CVE-2024-2961: Buffer Overflow in glibc ISO-2022-CN-EXT iconv Converter

40a2447c-b770-4851-ab63-715599427090

The glibc ISO-2022-CN-EXT character encoding converter contains a buffer overflow vulnerability in the SS2 (Shift State 2) and SS3 (Shift State 3) character set designation escape sequence handling. When converting UTF-8 input with characters that require SS2 or SS3 designation, the converter writes 4 bytes to the output buffer without bounds checking, causing memory corruption if the buffer has insufficient space.