CVE-2026-77117
published 2026-09-15CVE-2026-77117: Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may…
PriorityP430medium5.9CVSS 3.1
AVNACHPRNUINSUCNINAH
EPSS
0.36%
28.4th percentile
Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.
Some SHIFT_JISX0213 sequences decode to two code points. If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call. The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only the SHIFT_JISX0213 character set is affected, which is not commonly used. The related defect in the EUC_JISX0213 converter is tracked separately as CVE-2026-80489.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | glibc | — | — |
| the_gnu_c_library | glibc | 2.3 – 2.44 | — |
| ubuntu | glibc | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.9MEDIUM
vendor_ubuntu2.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progres
ghsa_unreviewed·2026-09-15·CVSS 5.9
CVE-2026-77117 [MEDIUM] CWE-835 Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progres
Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.
Some SHIFT_JISX0213 sequences decode to two code points. If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call. The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. O
GHSA
Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress,
ghsa_unreviewed·2026-09-15·CVSS 5.9
CVE-2026-80489 [MEDIUM] CWE-835 Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress,
Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang.
Some EUC_JISX0213 sequences decode to two code points. If the output buffer has room for only the first one, the converter stores the second in the conversion state and returns E2BIG, but it never clears that pending character after emitting it on the next call. The converter then keeps emitting the pending character without consuming further input, so an application that retries the conversion loops forever. The input must be attacker controlled and the application must convert it with an output buffer small enough to split the two code points. Only
Ubuntu
GNU C Library vulnerabilities
vendor_ubuntu·2026-09-10·CVSS 2.1
CVE-2026-77117 [LOW] GNU C Library vulnerabilities
Title: GNU C Library vulnerabilities
Summary: Several security issues were fixed in GNU C Library.
USN-8737-1 fixed vulnerabilities in GNU C Library. This update provides
the corresponding fixes for Ubuntu 24.04 LTS.
Original advisory details:
It was discovered that GNU C Library had a buffer overflow in the strfmon
function when handling right-justification padding. An attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-19499)
It was discovered that GNU C Library had an out-of-bounds stack array
access in the tdelete function. An attacker could possibly use this issue
to cause a denial of service or execute arbitrary code. (CVE-2026-19542)
It was discovered that GNU C Library incorrectly
Ubuntu
GNU C Library vulnerabilities
vendor_ubuntu·2026-09-08·CVSS 2.1
CVE-2026-77117 [LOW] GNU C Library vulnerabilities
Title: GNU C Library vulnerabilities
Summary: Several security issues were fixed in GNU C Library.
It was discovered that GNU C Library had a buffer overflow in the strfmon
function when handling right-justification padding. An attacker could
possibly use this issue to cause a denial of service or execute arbitrary
code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-19499)
It was discovered that GNU C Library had an out-of-bounds stack array
access in the tdelete function. An attacker could possibly use this issue
to cause a denial of service or execute arbitrary code. (CVE-2026-19542)
It was discovered that GNU C Library incorrectly handled memory when
calling wordexp with the WRDE_APPEND flag. An attacker could possibly use
this issue to cause a denial of service. (CVE-2026-63
Red Hat
glibc: Non-progress DoS in SHIFT_JISX0213 ->
vendor_redhat·2026-08-25·CVSS 5.9
CVE-2026-77117 [MEDIUM] CWE-835 glibc: Non-progress DoS in SHIFT_JISX0213 ->
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFT_JISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to persistent retry churn. This can result in a denial of service (DoS) for callers converting untrusted text.
Statement: This Moderate impact flaw in glibc's SHIFT_JISX0213 to UCS-4 conversion can lead to a denial of service. Exploitation requires an attacker to provide specially crafted input that an application converts using this specific path, triggering a 2-byte sequence and a caller that retries after an E2BIG error with insufficient output space. Red
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-77117 glibc: Non-progress DoS in SHIFT_JISX0213 -> [fedora-all]
bugzilla·2026-08-25
CVE-2026-77117 [MEDIUM] CVE-2026-77117 glibc: Non-progress DoS in SHIFT_JISX0213 -> [fedora-all]
CVE-2026-77117 glibc: Non-progress DoS in SHIFT_JISX0213 -> [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Summary: Non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state
handling (`iconvdata/shift_jisx0213.c`): crafted input can cause repeated
emission of a buffered code point without further input consumption,
leading to persistent retry churn and denial of service in callers
converting untrusted text.
Requirements to exploit: An attacker must be able to supply text that an
application converts from `SHIFT_JISX0213` to `UCS-4`, trigger a 2-byte
sequence that expands through `__jisx0213_to_ucs_
Bugzilla
CVE-2026-77117 zig: Non-progress DoS in SHIFT_JISX0213 -> [epel-all]
bugzilla·2026-08-25
CVE-2026-77117 [MEDIUM] CVE-2026-77117 zig: Non-progress DoS in SHIFT_JISX0213 -> [epel-all]
CVE-2026-77117 zig: Non-progress DoS in SHIFT_JISX0213 -> [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Summary: Non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state
handling (`iconvdata/shift_jisx0213.c`): crafted input can cause repeated
emission of a buffered code point without further input consumption,
leading to persistent retry churn and denial of service in callers
converting untrusted text.
Requirements to exploit: An attacker must be able to supply text that an
application converts from `SHIFT_JISX0213` to `UCS-4`, trigger a 2-byte
sequence that expands through `__jisx0213_to_ucs_comb
Bugzilla
CVE-2026-77117 glibc: Non-progress DoS in SHIFT_JISX0213 ->
bugzilla·2026-08-25
CVE-2026-77117 [MEDIUM] CVE-2026-77117 glibc: Non-progress DoS in SHIFT_JISX0213 ->
CVE-2026-77117 glibc: Non-progress DoS in SHIFT_JISX0213 ->
Summary: Non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state
handling (`iconvdata/shift_jisx0213.c`): crafted input can cause repeated
emission of a buffered code point without further input consumption,
leading to persistent retry churn and denial of service in callers
converting untrusted text.
Requirements to exploit: An attacker must be able to supply text that an
application converts from `SHIFT_JISX0213` to `UCS-4`, trigger a 2-byte
sequence that expands through `__jisx0213_to_ucs_combining`, and have the
caller retry after `E2BIG` with the same conversion state once only enough
output space remains for the first of the two emitted code points.
Applications that never use this conversion path, or that abort on repe
Bugzilla
CVE-2026-77117 zig: Non-progress DoS in SHIFT_JISX0213 -> [fedora-all]
bugzilla·2026-08-25
CVE-2026-77117 [MEDIUM] CVE-2026-77117 zig: Non-progress DoS in SHIFT_JISX0213 -> [fedora-all]
CVE-2026-77117 zig: Non-progress DoS in SHIFT_JISX0213 -> [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Summary: Non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state
handling (`iconvdata/shift_jisx0213.c`): crafted input can cause repeated
emission of a buffered code point without further input consumption,
leading to persistent retry churn and denial of service in callers
converting untrusted text.
Requirements to exploit: An attacker must be able to supply text that an
application converts from `SHIFT_JISX0213` to `UCS-4`, trigger a 2-byte
sequence that expands through `__jisx0213_to_ucs_co
2026-09-15
Published