Buffer Overflow Vulnerability in Iconv Encoding Module by FreeBSD

CVE-2026-58082

What is CVE-2026-58082?

The ISO-2022 encoding module utilized by FreeBSD is susceptible to a buffer overflow issue due to a stack buffer limit of MB_LEN_MAX (6 bytes) for intermediate character output. Certain variations of ISO-2022 encoding can require up to 10 bytes per character, creating conditions where improper handling of untrusted input can lead to a stack buffer overflow of up to four bytes. Applications relying on iconv(3) for character conversion that employ these affected encoding modules face potential exploitation risks.

References