Buffer Over-read in GNU C Library's Iconv Feature Processing EUC-KR Encoding

CVE-2019-25013

Summary

The iconv feature in the GNU C Library (glibc) through version 2.32 is susceptible to a buffer over-read when it encounters invalid multi-byte input sequences in the EUC-KR encoding. This flaw could allow an attacker to potentially read sensitive memory contents, leading to unintended information disclosure or other unpredictable behavior in applications that rely on this library for text processing.

References