{"uuid": "eee46f3c-0bdd-4a7e-b6b7-07a57f9ec00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "https://t.me/sysadm_in_up/2118", "content": "/ The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to\ncrash an application or overwrite a neighbouring variable.\n\nhttps://sourceware.org/pipermail/libc-announce/2024/000040.html\n\na new exploitation technique that affects the whole PHP ecosystem, and the compromission of several applications. \n\nCVE-2024-2961\n\nhttps://security-tracker.debian.org/tracker/CVE-2024-2961", "creation_timestamp": "2026-07-30T00:03:03.553162Z"}