CVE-2025-4373 Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

A flaw was found in GLib, which is vulnerable to an integer overflow in the gstringinsertunichar function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite...

Buffer Underwrite (Buffer Underflow)

Overview Affected versions of this package are vulnerable to Buffer Underwrite Buffer Underflow through the gstringinsertunichar function. An attacker can alter or corrupt memory data by inserting characters in a way that manipulates the buffer boundaries. Remediation Upgrade glib to version 2.85...

PT-2025-19955

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw was found in GLib, which is vulnerable to an integer overflow in the g string insert unichar function. When the position at which to insert the character is large, the position will...

glib 输入验证错误漏洞

glib is a general-purpose, portable utility library from the GNOME project. Many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, etc. are provided. An input validation error vulnerability exists in glib versions prior to 2.82.5, which stems...

PT-2025-15227

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified openSUSE Leap 15.4 SUSE Micro versions 5.1 through 5.5 Red Hat Enterprise Linux 6 Description An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp. This issue is...

PT-2025-28458

Name of the Vulnerable Software and Affected Versions: gdk-pixbuf affected versions not specified glib affected versions not specified Description: A flaw exists in gdk-pixbuf and glib, specifically in the gdk pixbuf jpeg image load increment function and g base64 encode step, respectively. When...

CVE-2024-34397 affecting package glib for versions less than 2.78.6-1

CVE-2024-34397 affecting package glib for versions less than 2.78.6-1. An upgraded version of the package is available that resolves this issue...

Linux Distros Unpatched Vulnerability : CVE-2023-32636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolv...

CBL Mariner 2.0 Security Update: glib (CVE-2023-32636)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-32636 advisory. - A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service...

CVE-2023-32643 affecting package glib for versions less than 2.71.0-4

CVE-2023-32643 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

CVE-2023-32636 affecting package glib for versions less than 2.71.0-4

CVE-2023-32636 affecting package glib for versions less than 2.71.0-4. A patched version of the package is available...

Azure Linux 3.0 Security Update: glib (CVE-2024-52533)

The version of glib installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52533 advisory. - gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because...

PT-2025-25431

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size...

USN-7114-1: GLib vulnerability

It was discovered that Glib incorrectly handled certain trailing characters. An attacker could possibly use this issue to cause a crash or other undefined behavior...

CBL Mariner 2.0 Security Update: glib (CVE-2024-52533)

The version of glib installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52533 advisory. - gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because...

RHEL 9 : mingw-glib2 (RHSA-2024:9442)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9442 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the...

GNOME GLib 安全漏洞

GNOME GLib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. A security vulnerability exists in GNOME GLib versions prior to 2.82.1, which stems from an error in gio/gsocks4aproxy.c that results in a buff...

glib: g_variant_byteswap() can take a long time with some non-normal inputs

A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause excessive processing, leading to denial of service...

DEBIAN-CVE-2023-29499

A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service...

CVE-2023-32636

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect gli...