Buffer Overflow Vulnerability in Iconv Encoding Modules by FreeBSD

CVE-2026-58081

What is CVE-2026-58081?

The iconv encoding modules in FreeBSD, including HZ, UTF-7, VIQR, and ZW, are susceptible to buffer overflow vulnerabilities due to inadequate checks on the size of caller-supplied output buffers. Applications that utilize iconv(3) for converting untrusted input with these encodings may be at risk, potentially allowing attackers to execute arbitrary code or disrupt service.

References