Affected: Alpaquita:23: musl-default, Alpaquita:23: musl-perf, Alpaquita:25: musl-default, Alpaquita:25: musl-perf, Alpaquita:stream: musl-default, Alpaquita:stream: musl-perf, BellSoft Hardened Containers:23: musl-default, BellSoft Hardened Containers:23: musl-perf, BellSoft Hardened Containers:25: musl-default, BellSoft Hardened Containers:25: musl-perf and 2 more

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.

Affected: openEuler:24.03-LTS-SP2: musl

musl is an implementation of the C standard library built on top of the Linux system call API, including interfaces defined in the base language standard, POSIX, and widely agreed-upon extensions. It is lightweight, fast, simple, free, and strives to be correct in the sense of standards conformance and safety. Security Fix(es):

An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo number on 64-bit platforms, which is not practical).(CVE-2026-40200)

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.(CVE-2026-6042)

Affected: Ubuntu:Pro:14.04:LTS: musl, Ubuntu:Pro:16.04:LTS: musl, Ubuntu:Pro:18.04:LTS: musl, Ubuntu:Pro:20.04:LTS: musl, Ubuntu:22.04:LTS: musl, Ubuntu:24.04:LTS: musl, Ubuntu:25.10: musl, Ubuntu:26.04:LTS: musl

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.