CVE-2026-6042: Inefficient Algorithmic Complexity in musl libc
A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.
AI Analysis
Technical Summary
This vulnerability involves inefficient algorithmic complexity in the iconv function of musl libc's GB18030 4-byte Decoder component. When manipulated locally, this flaw can cause the function to perform inefficiently, potentially degrading system performance or causing denial of service conditions. The issue affects musl libc versions 1.2.0 through 1.2.6. The CVSS 4.0 base score is 4.8 (medium), reflecting local attack vector, low complexity, and no user interaction required. No official remediation level or patch link is provided in the available data.
Potential Impact
The impact is limited to performance degradation or denial of service due to inefficient algorithmic complexity triggered locally with low privileges. There is no indication of remote exploitation, privilege escalation, or data compromise. No known exploits exist in the wild at this time.
Mitigation Recommendations
A patch is recommended to address this vulnerability; however, no official patch or fix has been confirmed in the provided data. Users should monitor the musl libc project for official advisories and updates. Until a patch is available, restricting local access to trusted users may reduce risk.
CVE-2026-6042: Inefficient Algorithmic Complexity in musl libc
Description
A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue, it is recommended to deploy a patch.
CVSS v4.0
Score 4.8medium
Affected software
pkg:github/musl/muslRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves inefficient algorithmic complexity in the iconv function of musl libc's GB18030 4-byte Decoder component. When manipulated locally, this flaw can cause the function to perform inefficiently, potentially degrading system performance or causing denial of service conditions. The issue affects musl libc versions 1.2.0 through 1.2.6. The CVSS 4.0 base score is 4.8 (medium), reflecting local attack vector, low complexity, and no user interaction required. No official remediation level or patch link is provided in the available data.
Potential Impact
The impact is limited to performance degradation or denial of service due to inefficient algorithmic complexity triggered locally with low privileges. There is no indication of remote exploitation, privilege escalation, or data compromise. No known exploits exist in the wild at this time.
Mitigation Recommendations
A patch is recommended to address this vulnerability; however, no official patch or fix has been confirmed in the provided data. Users should monitor the musl libc project for official advisories and updates. Until a patch is available, restricting local access to trusted users may reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-04-09T17:34:11.256Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d8c0ed1cc7ad14daa35351
Added to database: 04/10/2026, 09:20:45 UTC
Last enriched: 04/17/2026, 12:22:51 UTC
Last updated: 07/31/2026, 19:23:00 UTC
Views: 119
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.