The vulnerability CVE-2024-2961 involves an out-of-bounds write (CWE-787) in the iconv() function of glibc versions 2.39 and earlier. Specifically, when converting strings to the ISO-2022-CN-EXT character set, iconv() may overflow the output buffer by up to 4 bytes. This buffer overflow can lead to application crashes or memory corruption by overwriting neighboring variables. The CVSS 3.1 base score is 7.3, indicating high severity with local attack vector, low complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No known exploits in the wild have been reported. No patch or official fix information is provided in the input data.

Successful exploitation of this vulnerability can cause application crashes or memory corruption due to buffer overflow in iconv() when processing ISO-2022-CN-EXT encoded strings. This may lead to denial of service or potentially impact confidentiality and integrity of affected applications using glibc for character set conversion.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted input using iconv() with the ISO-2022-CN-EXT character set or apply other application-level mitigations to prevent triggering this condition.