GNU C Library BIG-HKSCS decoding hang on crafted input
Original title: The GNU C Library security advisories update for 2026-11-04
The flaw affects GNU C Library versions 2.18 through 2.31 and may cause the converter to hang on crafted BIG-HKSCS input.
The GNU C Library has a decoding issue in the BIG-HKSCS character set. Crafted input to UCS-4 or the internal wide character encoding can cause no progress in conversion. This results in the calling application hanging. The advisory was published on November 4.
- Affects versions 2.18 through 2.31
- Hang occurs during iconv conversion
- No exploitation details provided
Impact: denial of service via hang
| Product | Affected |
|---|---|
| GNU C Library | 2.18 through 2.31 |
From the original article
Posted by Carlos O'Donell on Nov 04 The following security advisories have been published: GLIBC-SA-2026-0026: =================== BIG-HKSCS decoding hang on crafted input Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2. 18 through 2. 31 may result in the converter making no progress, causing the calling application to hang.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.