The vulnerability CVE-2026-4046 affects the iconv() function in glibc versions 2.43 and earlier. When converting character data from IBM1390 or IBM1399 encodings, an assertion failure can be triggered, causing the application to crash. This is classified as CWE-617 (Reachable Assertion). The flaw allows remote attackers to cause a denial of service by supplying crafted input that triggers this assertion failure. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting its network attack vector, low complexity, no privileges required, no user interaction, and impact limited to availability. No known exploits are reported in the wild. The vulnerability can be trivially mitigated by disabling or removing the IBM1390 and IBM1399 character sets if they are not required by the system. There is no vendor advisory or patch information available at this time.

This vulnerability allows remote attackers to cause an application crash (denial of service) by triggering an assertion failure in the iconv() function when processing IBM1390 or IBM1399 character sets. There is no impact on confidentiality or integrity. The denial of service could disrupt availability of affected applications relying on glibc for character set conversions involving these encodings.

No official patch or fix is currently documented. The vulnerability can be trivially mitigated by removing or disabling support for the IBM1390 and IBM1399 character sets on systems that do not require them. Users should monitor vendor advisories for any future patches or official fixes.