CVE-2026-6042 PUBLISHED

A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.

• 0x001 (VulDB User) reporter
• 0x001 (VulDB User) analyst

• VDB-356620 | musl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexity
• VDB-356620 | CTI Indicators (IOB, IOC, IOA)
• Submit #796352 | musl libc musl 0.8.0 - 1.2.6 Inefficient Algorithmic Complexity
• https://www.openwall.com/lists/oss-security/2026/04/02/10
• https://www.openwall.com/lists/oss-security/2026/04/03/2

• Inefficient Algorithmic Complexity CWE
• Denial of Service CWE