PatchSiren

musl CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM musl CVE published 2026-04-10

CVE-2026-6042

A security flaw has been discovered in musl libc up to 1.2.6, affecting the iconv function in src/locale/iconv.c of the GB18030 4-byte Decoder component. This issue results in inefficient algorithmic complexity, requiring local access to be exploited. A patch is recommended to fix this issue. The vulnerability has been assessed to have a CVSS score of 4.8 and a severity of MEDIUM. Defenders managing syste [truncated]