An off-by-one heap-based buffer overflow flaw was found in glibc"s internal __gconv_translit_find function. An attacker able to make an application call the iconv_open function with a specially crafted argument could possibly use this flaw to execute arbitrary code with the privileges of that application.