musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can
    trigger iconv conversion of untrusted EUC-KR text to UTF-8. (CVE-2025-26519)

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can     trigger iconv conversion of untrusted EUC-KR text to UTF-8. (CVE-2025-26519)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can
    trigger iconv conversion of untrusted EUC-KR text to UTF-8. (CVE-2025-26519)

ID	Name	Product	Family	Severity
427813	Alpine: multiple musl packages: security update to 1.2.5-r10	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
427813	Alpine: multiple musl packages: security update to 1.2.5-r10	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
231965	Linux Distros Unpatched Vulnerability : CVE-2025-26519	Nessus	Misc.	high
420891	Alpine: musl: security update to 1.2.4_git20230717-r5	Tenable Cloud Security	Alpine Linux Local Security Checks	high
420891	Alpine: musl: security update to 1.2.4_git20230717-r5	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
420890	Alpine: musl: security update to 1.2.4-r3	Tenable Cloud Security	Alpine Linux Local Security Checks	high
420890	Alpine: musl: security update to 1.2.4-r3	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
420889	Alpine: musl: security update to 1.2.3-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	high
420889	Alpine: musl: security update to 1.2.3-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
420888	Alpine: musl: security update to 1.2.3-r4	Tenable Cloud Security	Alpine Linux Local Security Checks	high
420888	Alpine: musl: security update to 1.2.3-r4	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
420887	Alpine: musl: security update to 1.2.5-r9	Tenable Cloud Security	Alpine Linux Local Security Checks	high
420887	Alpine: musl: security update to 1.2.5-r9	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
420886	Alpine: musl: security update to 1.2.5-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	high
420886	Alpine: musl: security update to 1.2.5-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2025-26519

high

Tenable Plugins

medium

medium

high

high

high

high

high

high

high

high

high

high

high

high

high