nvd-json-data-feeds/CVE-2024/CVE-2024-29xx/CVE-2024-2961.json

{
  "id": "CVE-2024-2961",
  "sourceIdentifier": "3ff69d7a-14f2-4f67-a097-88dee7810d18",
  "published": "2024-04-17T18:15:15.833",
  "lastModified": "2024-04-17T20:08:21.887",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.\n"
    }
  ],
  "metrics": {},
  "weaknesses": [
    {
      "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004",
      "source": "3ff69d7a-14f2-4f67-a097-88dee7810d18"
    }
  ]
}