glibc patches heap overflow in fopen ccs= handling
Empty charset names after stripping could make fopen read past a delimiter and corrupt the heap.
By rvalueEmpty charset names after stripping could make fopen read past a delimiter and corrupt the heap.
By rvalueCVE-2026-18374 let a crafted empty charset name overrun a heap buffer when opening files with character conversion.
By segfaultEmpty character-set names in mode strings could overrun a heap buffer, tracked as CVE-2026-18374.
By segfaultCVE-2026-18374 let an empty ccs= mode string overflow a heap buffer; fopen now rejects it with EINVAL.
By rvalueCVE-2026-18374 let a crafted mode string overrun a small heap buffer when a charset token stripped to empty.
By segfault