A vulnerability in Musl is being exploited during text transcoding into the EUC-KR encoding.
A vulnerability has been identified in the Musl standard C library (CVE-2024-2961), leading to a buffer overflow when converting specially crafted text from EUC-KR encoding to UTF-8 using the iconv() function. The vulnerability manifests starting from Musl version 0.9.13 and will be fixed in the forthcoming release 1.2.6 (a patch should be used until the update is released). The vulnerability was discovered by the maintainer of the libxml2 library during fuzz testing. […]
