CVE-2020-28928: In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and so...

Security readout for executives and security teams

CVE-2020-28928 is a buffer overflow in musl libc, a common C library used by some Linux systems and containers. The issue is in character conversion handling. Business risk depends on whether exposed software calls this function with attacker-influenced input; the bundle provides no CVSS score or evidence of active exploitation. Most likely exposure is systems, appliances, or container images built on musl libc through 1.2.1. Alpine-derived containers may warrant attention because Apache APISIX Docker references upgraded Alpine due to this CVE. Prioritize as moderate operational work unless a critical application confirms reachable attacker-controlled conversion input. Patch through normal dependency and container refresh cycles; accelerate for internet-facing services using old musl-based images. Mitigation focus: Inventory musl versions across hosts, containers, and base images.; Apply musl updates from the relevant OS or distribution vendor.; Rebuild and redeploy images that include vulnerable musl packages..

Prepared

Jun 5, 2026, 13:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.