CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. Its EPSS score suggests a 88.3% probability of exploitation in the next 30 days.
CVE
CVE-2024-2961
Severity
HIGH
CVSS
7.3
EPSS
88.33%
Original NVD Description
The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.
Related CVEs
Other vulnerabilities affecting the same vendor(s)