#fopen

glibc plugs heap overflow in fopen ccs= charset handling

CVE-2026-18374 let a crafted mode string overrun a small heap buffer when a charset token stripped to empty.