Threats affecting pkg:brew/glibc

The iconv() function in GNU C Library (glibc) versions older than 2.39 may overflow the output buffer by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set. This buffer overflow can potentially crash applications or overwrite adjacent memory variables. The vulnerability is identified as CVE-2024-2961 and has a high severity rating. A fix is available in glibc version 2.39.