Logo
›
›component›musl
Name
musl
Version
1.2.3+gi
Type
library
Description
An implementation of the standard library for Linux-based systems
Licenses
MIT
PURL
-
CPE
cpe:2.3:*:musl-libc:musl:1.2.3+gitX:*:*:*:*:*:*:*

Other Versions#

Project
Branch
Version
yocto
master
1.2.6+git
yocto
scarthgap
1.2.4+git

Patches#

#
Title
Author
Resolve
1
iconv: fix erroneous input validation in EUC-KR decoder
Rich Felker <dalias@aerifal.cx>
CVE-2025-26519
2
iconv: harden UTF-8 output code path against input decoder
Rich Felker <dalias@aerifal.cx>
CVE-2025-26519
3
ldso: Use syslibdir and libdir as default pathes to libdirs
Serhey Popovych <serhe.popovych@gmail.com>
4
Make dynamic linker a relative symlink to libc
Amarnath Valluri <amarnath.valluri@intel.com>

Vulnerabilities#

Name
Analysis
Description
CVE-2025-26519
Patched
musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.