Cyber ·
Advisory GLIBC-SA-2026-0026: hang in BIG-HKSCS conversion in the GNU C Library
On 4 November 2026, the oss-sec list published advisory GLIBC-SA-2026-0026 about a specially crafted BIG-HKSCS input that can hang applications calling iconv in GNU C Library versions 2.18 to 2.31.
According to the content available in the oss-sec feed, published by Carlos O'Donell on 4 November 2026, advisory GLIBC-SA-2026-0026 describes a hang in BIG-HKSCS decoding. When a specially crafted BIG-HKSCS input is converted to UCS-4 or to the internal wide character encoding, for example with iconv, the converter may stop advancing and the calling application hangs. The advisory lists GNU C Library versions 2.18 to 2.31 as affected. The text received is truncated, so mitigation details and fixed versions should be confirmed in the original source. To verify, consult the oss-sec list and the official GNU C Library advisory through public channels, and check the glibc version installed on your systems.
Original source: Atualização dos avisos de segurança da GNU C Library em 2026-11-04