<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Cve-2026-4046 — CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/tags/cve-2026-4046/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata — refreshed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Mon, 30 Mar 2026 18:16:19 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/tags/cve-2026-4046/feed.xml" rel="self" type="application/rss+xml"/><item><title>GNU C Library iconv() Function Assertion Failure (CVE-2026-4046)</title><link>https://feed.craftedsignal.io/briefs/2026-03-glibc-iconv-crash/</link><pubDate>Mon, 30 Mar 2026 18:16:19 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-03-glibc-iconv-crash/</guid><description>A vulnerability in the iconv() function of the GNU C Library (versions 2.43 and earlier) can cause a crash due to an assertion failure when handling IBM1390 or IBM1399 character sets, potentially leading to remote application denial-of-service.</description><content:encoded><![CDATA[<p>The GNU C Library (glibc) is a fundamental component of many Linux systems, providing core functionalities for applications. A vulnerability, CVE-2026-4046, exists within the <code>iconv()</code> function in glibc versions 2.43 and earlier. This flaw can be triggered when the library attempts to convert character sets from IBM1390 or IBM1399. If an application utilizes <code>iconv()</code> to process potentially malicious input from these character sets, it could lead to an assertion failure and subsequent crash…</p>
]]></content:encoded><category domain="severity">high</category><category domain="type">advisory</category><category>glibc</category><category>iconv</category><category>denial-of-service</category><category>crash</category><category>cve-2026-4046</category></item></channel></rss>