CVE-2012-6656: iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a d...

Security readout for executives and security teams

CVE-2012-6656 is a glibc denial-of-service flaw in character-set conversion. Software that converts IBM930 encoded input to UTF-8 through iconv could crash or read out of bounds when given malformed data. The affected path is specialized, so business urgency depends on whether services process IBM930 data from untrusted sources. Exposure is most plausible on Linux systems using vulnerable glibc where applications pass externally influenced IBM930 encoded data into iconv for UTF-8 conversion. General systems that never process IBM930 input are less likely to be practically exposed, though glibc may still be present broadly. Treat this as a targeted availability risk rather than a broad emergency. Patch through standard Linux maintenance, but accelerate review for legacy systems or services that process mainframe or IBM code-page data from partners, customers, or uploads. Mitigation focus: Update glibc packages using the relevant Linux distribution advisory.; Confirm vendor patches are applied, not only upstream version strings.; Prioritize services that convert untrusted IBM930 data with iconv..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.