What is GHSA-5wwm-g25c-cpx8?

GHSA-5wwm-g25c-cpx8 is a security advisory published by GitHub Security Advisories with Medium severity. Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example...

Which CVE IDs does GHSA-5wwm-g25c-cpx8 cover?

GHSA-5wwm-g25c-cpx8 covers the following CVE IDs: CVE-2026-122054. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5wwm-g25c-cpx8?

GHSA-5wwm-g25c-cpx8 has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

GHSA-5wwm-g25c-cpx8MediumCVSS 5.9

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example...

Vendor

GitHub Security Advisories

Published

November 4, 2026

Last Modified

November 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-122054 →

📋 Description

Converting crafted BIG-HKSCS input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.18 through 2.31 may result in the converter making no progress, causing the calling application to hang.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-122054
https://sourceware.org/bugzilla/show_bug.cgi?id=25734
https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0026
https://github.com/advisories/GHSA-5wwm-g25c-cpx8