Reachable assertion in GNU C Library (glibc) - CVE-2026-4046

Vulnerability identifier: #VU148984

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-4046

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to a reachable assertion in the iconv function when processing specially crafted input using the IBM1390 or IBM1399 character sets. A remote attacker can supply malicious input remotely to cause a denial of service.

GNU C Library (glibc)
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 11
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Micro
Anolis OS
SUSE Linux Enterprise Live Patching
openSUSE Leap
openEuler
Ubuntu
Fedora
Maximo Application Suite - Monitor Component
IBM MQ Appliance
IBM DataPower Gateway
libc6 (Ubuntu package)
glibc-livepatches-debugsource
glibc-livepatches
glibc-livepatches-debuginfo
nscd
glibc
glibc-devel
glibc-profile
glibc-profile-32bit
glibc-devel-32bit
glibc-locale
glibc-32bit
glibc-info
glibc-i18ndata
glibc-debuginfo-32bit
glibc-html
glibc-locale-32bit
glibc-debuginfo
glibc-debugsource
glibc-debugutils
glibc-help
glibc-locale-source
glibc-nss-devel
libnsl
nss_modules
glibc-compat-2.17
glibc-common
glibc-benchtests
glibc-all-langpacks
glibc-langpack-ky
glibc-langpack-lb
glibc-langpack-lg
glibc-langpack-ko
glibc-langpack-li
glibc-langpack-kw
glibc-langpack-ku
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-it
glibc-langpack-lij
glibc-langpack-ln
glibc-langpack-lo
glibc-langpack-lt
glibc-langpack-lv
glibc-langpack-lzh
glibc-langpack-mag
glibc-langpack-mai
glibc-langpack-mfe
glibc-langpack-fur
glibc-langpack-he
glibc-langpack-hak
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-hi
glibc-langpack-fr
glibc-langpack-fo
glibc-langpack-fil
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-br
glibc-langpack-ig
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-eo
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-kn
glibc-langpack-id
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-sid
glibc-langpack-quz
glibc-langpack-raj
glibc-langpack-ro
glibc-langpack-ru
glibc-langpack-rw
glibc-langpack-sa
glibc-langpack-sah
glibc-langpack-sat
glibc-langpack-sc
glibc-langpack-sd
glibc-langpack-se
glibc-langpack-sgs
glibc-langpack-shn
glibc-langpack-shs
glibc-langpack-si
glibc-langpack-pt
glibc-langpack-sk
glibc-langpack-sl
glibc-langpack-sm
glibc-langpack-so
glibc-langpack-sq
glibc-langpack-sr
glibc-langpack-ss
glibc-langpack-st
glibc-langpack-sv
glibc-langpack-sw
glibc-langpack-szl
glibc-langpack-ta
glibc-langpack-tcy
glibc-langpack-te
glibc-langpack-ne
glibc-langpack-mhr
glibc-langpack-mi
glibc-langpack-miq
glibc-langpack-mjw
glibc-langpack-mk
glibc-langpack-ml
glibc-langpack-mn
glibc-langpack-mni
glibc-langpack-mr
glibc-langpack-ms
glibc-langpack-mt
glibc-langpack-my
glibc-langpack-nan
glibc-langpack-nb
glibc-langpack-nds
glibc-langpack-mg
glibc-langpack-nhn
glibc-langpack-niu
glibc-langpack-nl
glibc-langpack-nn
glibc-langpack-nr
glibc-langpack-nso
glibc-langpack-oc
glibc-langpack-om
glibc-langpack-or
glibc-langpack-os
glibc-langpack-pa
glibc-langpack-pap
glibc-langpack-pl
glibc-langpack-ps
glibc-langpack-tl
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-tt
glibc-langpack-ts
glibc-langpack-tr
glibc-langpack-tpi
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-ve
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-langpack-the
glibc-langpack-th
glibc-langpack-tg
compat-libpthread-nonshared
glibc-langpack-zh
glibc-doc
nss_hesiod
nss_db
glibc-utils
glibc-static
glibc-minimal-langpack
glibc-langpack-zu
glibc-langpack-el
glibc-langpack-yuw
glibc-langpack-yue
glibc-langpack-yo
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ce
glibc-langpack-ayc
glibc-langpack-az
glibc-langpack-be
glibc-langpack-bem
glibc-langpack-ber
glibc-langpack-bg
glibc-langpack-bhb
glibc-langpack-bi
glibc-langpack-bn
glibc-langpack-bo
glibc-langpack-brx
glibc-langpack-bs
glibc-langpack-byn
glibc-langpack-ca
glibc-langpack-bho
glibc-langpack-chr
glibc-langpack-cmn
glibc-langpack-crh
glibc-langpack-cs
glibc-langpack-csb
glibc-langpack-cv
glibc-langpack-cy
glibc-langpack-da
glibc-langpack-de
glibc-langpack-doi
glibc-langpack-dsb
glibc-langpack-dv
glibc-langpack-dz
glibc-langpack-en
glibc-langpack-as
glibc-gconv-extra
glibc-headers
glibc-langpack-aa
glibc-langpack-af
glibc-langpack-agr
glibc-langpack-am
glibc-langpack-ast
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-ak
glibc-langpack-an
glibc-locale-archive

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Maximo Application Suite - Monitor Component - addressed in versions 9.0.25, 9.1.15, 9.2.4
IBM MQ Appliance - update to 10.0.0.6
IBM DataPower Gateway - addressed in versions 10.5.0.23, 10.6.0.11
libc6 (Ubuntu package) - addressed in versions 2.35-0ubuntu3.14, 2.39-0ubuntu8.8, 2.43-2ubuntu2.3
glibc-livepatches-debugsource - addressed in versions 0.4-150400.3.16.1, 0.4-150600.8.5.1, 0.4-150700.10.7.1
glibc-livepatches - addressed in versions 0.4-150400.3.16.1, 0.4-150600.8.5.1, 0.4-150700.10.7.1
glibc-livepatches-debuginfo - addressed in versions 0.4-150400.3.16.1, 0.4-150600.8.5.1, 0.4-150700.10.7.1
nscd - update to 2.11.3-17.110.55.1
glibc - update to 2.11.3-17.110.55.1
glibc-devel - update to 2.11.3-17.110.55.1
glibc-profile - update to 2.11.3-17.110.55.1
glibc-profile-32bit - update to 2.11.3-17.110.55.1
glibc-devel-32bit - update to 2.11.3-17.110.55.1
glibc-locale - update to 2.11.3-17.110.55.1
glibc-32bit - update to 2.11.3-17.110.55.1
glibc-info - update to 2.11.3-17.110.55.1
glibc-i18ndata - update to 2.11.3-17.110.55.1
glibc-debuginfo-32bit - update to 2.11.3-17.110.55.1
glibc-html - update to 2.11.3-17.110.55.1
glibc-locale-32bit - update to 2.11.3-17.110.55.1
glibc-debuginfo - update to 2.11.3-17.110.55.1
glibc-debugsource - update to 2.11.3-17.110.55.1
glibc-debuginfo - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-devel - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-debugutils - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-debugsource - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-help - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-locale-source - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-nss-devel - addressed in versions 2.28-123, 2.34-175, 2.38-101
libnsl - addressed in versions 2.28-123, 2.34-175, 2.38-101
nscd - addressed in versions 2.28-123, 2.34-175, 2.38-101
nss_modules - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-compat-2.17 - addressed in versions 2.28-123, 2.34-175
glibc-common - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-benchtests - update to 2.28-123
glibc-all-langpacks - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc - addressed in versions 2.28-123, 2.34-175, 2.38-101
glibc-langpack-ky - update to 2.28-251.0.2
glibc-langpack-lb - update to 2.28-251.0.2
glibc-langpack-lg - update to 2.28-251.0.2
glibc-langpack-ko - update to 2.28-251.0.2
glibc-langpack-li - update to 2.28-251.0.2
glibc-langpack-kw - update to 2.28-251.0.2
glibc-langpack-ku - update to 2.28-251.0.2
glibc-langpack-ks - update to 2.28-251.0.2
glibc-langpack-kok - update to 2.28-251.0.2
glibc-langpack-it - update to 2.28-251.0.2
glibc-langpack-lij - update to 2.28-251.0.2
glibc-langpack-ln - update to 2.28-251.0.2
glibc-langpack-lo - update to 2.28-251.0.2
glibc-langpack-lt - update to 2.28-251.0.2
glibc-langpack-lv - update to 2.28-251.0.2
glibc-langpack-lzh - update to 2.28-251.0.2
glibc-langpack-mag - update to 2.28-251.0.2
glibc-langpack-mai - update to 2.28-251.0.2
glibc-langpack-mfe - update to 2.28-251.0.2
glibc-langpack-fur - update to 2.28-251.0.2
glibc-langpack-he - update to 2.28-251.0.2
glibc-langpack-hak - update to 2.28-251.0.2
glibc-langpack-ha - update to 2.28-251.0.2
glibc-langpack-gv - update to 2.28-251.0.2
glibc-langpack-gu - update to 2.28-251.0.2
glibc-langpack-gl - update to 2.28-251.0.2
glibc-langpack-gez - update to 2.28-251.0.2
glibc-langpack-gd - update to 2.28-251.0.2
glibc-langpack-ga - update to 2.28-251.0.2
glibc-langpack-fy - update to 2.28-251.0.2
glibc-langpack-hi - update to 2.28-251.0.2
glibc-langpack-fr - update to 2.28-251.0.2
glibc-langpack-fo - update to 2.28-251.0.2
glibc-langpack-fil - update to 2.28-251.0.2
glibc-langpack-fi - update to 2.28-251.0.2
glibc-langpack-ff - update to 2.28-251.0.2
glibc-langpack-fa - update to 2.28-251.0.2
glibc-langpack-eu - update to 2.28-251.0.2
glibc-langpack-et - update to 2.28-251.0.2
glibc-langpack-es - update to 2.28-251.0.2
glibc-langpack-br - update to 2.28-251.0.2
glibc-langpack-ig - update to 2.28-251.0.2
glibc-langpack-km - update to 2.28-251.0.2
glibc-langpack-kl - update to 2.28-251.0.2
glibc-langpack-kk - update to 2.28-251.0.2
glibc-langpack-kab - update to 2.28-251.0.2
glibc-langpack-ka - update to 2.28-251.0.2
glibc-langpack-ja - update to 2.28-251.0.2
glibc-langpack-iu - update to 2.28-251.0.2
glibc-langpack-eo - update to 2.28-251.0.2
glibc-langpack-is - update to 2.28-251.0.2
glibc-langpack-ik - update to 2.28-251.0.2
glibc-langpack-kn - update to 2.28-251.0.2
glibc-langpack-id - update to 2.28-251.0.2
glibc-langpack-ia - update to 2.28-251.0.2
glibc-langpack-hy - update to 2.28-251.0.2
glibc-langpack-hu - update to 2.28-251.0.2
glibc-langpack-ht - update to 2.28-251.0.2
glibc-langpack-hsb - update to 2.28-251.0.2
glibc-langpack-hr - update to 2.28-251.0.2
glibc-langpack-hne - update to 2.28-251.0.2
glibc-langpack-hif - update to 2.28-251.0.2
glibc-langpack-sid - update to 2.28-251.0.2
glibc-langpack-quz - update to 2.28-251.0.2
glibc-langpack-raj - update to 2.28-251.0.2
glibc-langpack-ro - update to 2.28-251.0.2
glibc-langpack-ru - update to 2.28-251.0.2
glibc-langpack-rw - update to 2.28-251.0.2
glibc-langpack-sa - update to 2.28-251.0.2
glibc-langpack-sah - update to 2.28-251.0.2
glibc-langpack-sat - update to 2.28-251.0.2
glibc-langpack-sc - update to 2.28-251.0.2
glibc-langpack-sd - update to 2.28-251.0.2
glibc-langpack-se - update to 2.28-251.0.2
glibc-langpack-sgs - update to 2.28-251.0.2
glibc-langpack-shn - update to 2.28-251.0.2
glibc-langpack-shs - update to 2.28-251.0.2
glibc-langpack-si - update to 2.28-251.0.2
glibc-langpack-pt - update to 2.28-251.0.2
glibc-langpack-sk - update to 2.28-251.0.2
glibc-langpack-sl - update to 2.28-251.0.2
glibc-langpack-sm - update to 2.28-251.0.2
glibc-langpack-so - update to 2.28-251.0.2
glibc-langpack-sq - update to 2.28-251.0.2
glibc-langpack-sr - update to 2.28-251.0.2
glibc-langpack-ss - update to 2.28-251.0.2
glibc-langpack-st - update to 2.28-251.0.2
glibc-langpack-sv - update to 2.28-251.0.2
glibc-langpack-sw - update to 2.28-251.0.2
glibc-langpack-szl - update to 2.28-251.0.2
glibc-langpack-ta - update to 2.28-251.0.2
glibc-langpack-tcy - update to 2.28-251.0.2
glibc-langpack-te - update to 2.28-251.0.2
glibc-langpack-ne - update to 2.28-251.0.2
glibc-langpack-mhr - update to 2.28-251.0.2
glibc-langpack-mi - update to 2.28-251.0.2
glibc-langpack-miq - update to 2.28-251.0.2
glibc-langpack-mjw - update to 2.28-251.0.2
glibc-langpack-mk - update to 2.28-251.0.2
glibc-langpack-ml - update to 2.28-251.0.2
glibc-langpack-mn - update to 2.28-251.0.2
glibc-langpack-mni - update to 2.28-251.0.2
glibc-langpack-mr - update to 2.28-251.0.2
glibc-langpack-ms - update to 2.28-251.0.2
glibc-langpack-mt - update to 2.28-251.0.2
glibc-langpack-my - update to 2.28-251.0.2
glibc-langpack-nan - update to 2.28-251.0.2
glibc-langpack-nb - update to 2.28-251.0.2
glibc-langpack-nds - update to 2.28-251.0.2
glibc-langpack-mg - update to 2.28-251.0.2
glibc-langpack-nhn - update to 2.28-251.0.2
glibc-langpack-niu - update to 2.28-251.0.2
glibc-langpack-nl - update to 2.28-251.0.2
glibc-langpack-nn - update to 2.28-251.0.2
glibc-langpack-nr - update to 2.28-251.0.2
glibc-langpack-nso - update to 2.28-251.0.2
glibc-langpack-oc - update to 2.28-251.0.2
glibc-langpack-om - update to 2.28-251.0.2
glibc-langpack-or - update to 2.28-251.0.2
glibc-langpack-os - update to 2.28-251.0.2
glibc-langpack-pa - update to 2.28-251.0.2
glibc-langpack-pap - update to 2.28-251.0.2
glibc-langpack-pl - update to 2.28-251.0.2
glibc-langpack-ps - update to 2.28-251.0.2
glibc-langpack-tl - update to 2.28-251.0.2
glibc-langpack-uz - update to 2.28-251.0.2
glibc-langpack-ur - update to 2.28-251.0.2
glibc-langpack-unm - update to 2.28-251.0.2
glibc-langpack-uk - update to 2.28-251.0.2
glibc-langpack-ug - update to 2.28-251.0.2
glibc-langpack-tt - update to 2.28-251.0.2
glibc-langpack-ts - update to 2.28-251.0.2
glibc-langpack-tr - update to 2.28-251.0.2
glibc-langpack-tpi - update to 2.28-251.0.2
glibc-langpack-to - update to 2.28-251.0.2
glibc-langpack-tn - update to 2.28-251.0.2
glibc-langpack-ve - update to 2.28-251.0.2
glibc-langpack-tk - update to 2.28-251.0.2
glibc-langpack-tig - update to 2.28-251.0.2
glibc-langpack-ti - update to 2.28-251.0.2
glibc-langpack-the - update to 2.28-251.0.2
glibc-langpack-th - update to 2.28-251.0.2
glibc-langpack-tg - update to 2.28-251.0.2
compat-libpthread-nonshared - addressed in versions 2.28-251.0.2, 2.38-22
glibc - addressed in versions 2.28-251.0.2, 2.38-22
glibc-all-langpacks - addressed in versions 2.28-251.0.2, 2.38-22
glibc-benchtests - addressed in versions 2.28-251.0.2, 2.38-22
glibc-langpack-zh - addressed in versions 2.28-251.0.2, 2.38-22
glibc-doc - addressed in versions 2.28-251.0.2, 2.38-22
nss_hesiod - addressed in versions 2.28-251.0.2, 2.38-22
nss_db - addressed in versions 2.28-251.0.2, 2.38-22
nscd - update to 2.28-251.0.2
libnsl - addressed in versions 2.28-251.0.2, 2.38-22
glibc-utils - addressed in versions 2.28-251.0.2, 2.38-22
glibc-static - addressed in versions 2.28-251.0.2, 2.38-22
glibc-nss-devel - addressed in versions 2.28-251.0.2, 2.38-22
glibc-minimal-langpack - addressed in versions 2.28-251.0.2, 2.38-22
glibc-locale-source - addressed in versions 2.28-251.0.2, 2.38-22
glibc-langpack-zu - update to 2.28-251.0.2
glibc-langpack-el - update to 2.28-251.0.2
glibc-langpack-yuw - update to 2.28-251.0.2
glibc-langpack-yue - update to 2.28-251.0.2
glibc-langpack-yo - update to 2.28-251.0.2
glibc-langpack-yi - update to 2.28-251.0.2
glibc-langpack-xh - update to 2.28-251.0.2
glibc-langpack-wo - update to 2.28-251.0.2
glibc-langpack-wal - update to 2.28-251.0.2
glibc-langpack-wae - update to 2.28-251.0.2
glibc-langpack-wa - update to 2.28-251.0.2
glibc-langpack-vi - update to 2.28-251.0.2
glibc-langpack-ce - update to 2.28-251.0.2
glibc-langpack-ayc - update to 2.28-251.0.2
glibc-langpack-az - update to 2.28-251.0.2
glibc-langpack-be - update to 2.28-251.0.2
glibc-langpack-bem - update to 2.28-251.0.2
glibc-langpack-ber - update to 2.28-251.0.2
glibc-langpack-bg - update to 2.28-251.0.2
glibc-langpack-bhb - update to 2.28-251.0.2
glibc-common - addressed in versions 2.28-251.0.2, 2.38-22
glibc-langpack-bi - update to 2.28-251.0.2
glibc-langpack-bn - update to 2.28-251.0.2
glibc-langpack-bo - update to 2.28-251.0.2
glibc-langpack-brx - update to 2.28-251.0.2
glibc-langpack-bs - update to 2.28-251.0.2
glibc-langpack-byn - update to 2.28-251.0.2
glibc-langpack-ca - update to 2.28-251.0.2
glibc-langpack-bho - update to 2.28-251.0.2
glibc-langpack-chr - update to 2.28-251.0.2
glibc-langpack-cmn - update to 2.28-251.0.2
glibc-langpack-crh - update to 2.28-251.0.2
glibc-langpack-cs - update to 2.28-251.0.2
glibc-langpack-csb - update to 2.28-251.0.2
glibc-langpack-cv - update to 2.28-251.0.2
glibc-langpack-cy - update to 2.28-251.0.2
glibc-langpack-da - update to 2.28-251.0.2
glibc-langpack-de - update to 2.28-251.0.2
glibc-langpack-doi - update to 2.28-251.0.2
glibc-langpack-dsb - update to 2.28-251.0.2
glibc-langpack-dv - update to 2.28-251.0.2
glibc-langpack-dz - update to 2.28-251.0.2
glibc-langpack-en - addressed in versions 2.28-251.0.2, 2.38-22
glibc-langpack-as - update to 2.28-251.0.2
glibc-devel - addressed in versions 2.28-251.0.2, 2.38-22
glibc-gconv-extra - addressed in versions 2.28-251.0.2, 2.38-22
glibc-headers - update to 2.28-251.0.2
glibc-langpack-aa - update to 2.28-251.0.2
glibc-langpack-af - update to 2.28-251.0.2
glibc-langpack-agr - update to 2.28-251.0.2
glibc-langpack-am - update to 2.28-251.0.2
glibc-langpack-ast - update to 2.28-251.0.2
glibc-langpack-ar - update to 2.28-251.0.2
glibc-langpack-anp - update to 2.28-251.0.2
glibc-langpack-ak - update to 2.28-251.0.2
glibc-langpack-an - update to 2.28-251.0.2
glibc-locale-archive - addressed in versions 2.34-175, 2.38-101
glibc - addressed in versions 2.42-12.fc43, 2.43-4.fc44

• https://security.snyk.io/vuln/SNYK-UNMANAGED-GLIBC-15918165
• https://bugzilla.redhat.com/show_bug.cgi?id=2453117

• Denial of service in GNU C Library
• openEuler 24.03 LTS update for glibc
• openEuler 22.03 LTS SP4 update for glibc
• openEuler 20.03 LTS SP4 update for glibc
• openEuler 24.03 LTS SP3 update for glibc
• openEuler 24.03 LTS SP1 update for glibc
• SUSE update for glibc-livepatches
• SUSE update for glibc-livepatches
• SUSE update for glibc-livepatches
• SUSE update for glibc
• Anolis OS update for glibc
• Anolis OS update for glibc
• IBM DataPower Gateway update for GNU C Library
• Fedora 44 update for glibc
• Fedora 43 update for glibc
• Multiple vulnerabilities in IBM Maximo Application Suite - Monitor Component
• Multiple vulnerabilities in IBM MQ Appliance
• Ubuntu update for glibc