The vulnerability of the g_buffered_input_stream_peek() function within the GLib library allows a hacker to cause a service failure.

The vulnerability of the gbufferedinputstreampeek function in the GLib library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the parse_header() function in the GLib library allows a hacker to cause a service failure.

The vulnerability of the parseheader function in the GLib library is related to the violation of the buffer’s initial boundary. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the g_base64_encode_close() function within the GLib library allows a attacker to cause a service failure.

The vulnerability of the gbase64encodeclose function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...

glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to...

glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

glib: Integer overflow in in g_escape_uri_string()

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

PT-2026-53874

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw exists in the D-Bus client-side implementation of the DBUS COOKIE SHA1 SASL authentication mechanism. The system fails to validate the cookie context parameter received from the server. A...

PT-2026-53875

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A state confusion issue exists in the g dbus node info new for xml function within the gio/gdbusintrospection.c file. This occurs when the software processes malformed D-Bus introspection XML,...

PT-2026-53873

Name of the Vulnerable Software and Affected Versions glib2 affected versions not specified mingw-glib2 affected versions not specified Description An off-by-one error exists in the g key file get locale string list function within the gkeyfile.c file. This issue occurs when the software loads a...

PT-2026-53872

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A buffer over-read occurs in the g io channel read line backend function within the giochannel.c file. This happens when a custom line terminator with a length greater than one is configured,...

glib:fuzz_markup_escape_text: Heap-buffer-overflow in g_utf8_get_char

Project: https://gitlab.gnome.org/GNOME/glib.git Detailed Report: https://oss-fuzz.com/testcase?key=5150018775613440 Project: glib Fuzzing Engine: afl Fuzz Target: fuzzmarkupescapetext Job Type: aflasanglib Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7bd2ef4e00b1...

[SECURITY] Fedora 44 Update: libsoup3-3.6.6-6.fc44

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

OESA-2026-1764 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib, which is...

OESA-2026-1763 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib, which is...

OESA-2026-1766 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib, which is...

OESA-2026-1765 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: A flaw was found in GLib, which is...

PT-2026-53871

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A buffer over-read can occur in the g regex replace function when the G REGEX RAW compile flag is used alongside case-change replacement escapes. This happens because the string append function...

[SECURITY] Fedora 43 Update: libsoup3-3.6.6-2.fc43

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...

[SECURITY] Fedora 43 Update: glib2-2.86.4-2.fc43

GLib is the low-level core library that forms the basis for projects such as GTK+ and GNOME. It provides data structure handling for C, portability wrappers, and interfaces for such runtime functionality as an event loop, threads, dynamic loading, and an object system...