590 matches found
SUSE-SU-2026:0286-1 Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in gbufferedinputstreampeek bsc1257049...
Security update for glib2
This update for glib2 fixes the following issues: CVE-2026-0988: Fixed a potential integer overflow in gbufferedinputstreampeek bsc1257049. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...
SUSE-SU-2026:0266-1 Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in gbufferedinputstreampeek bsc1257049...
SUSE-SU-2026:0264-1 Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-0988: Fixed a potential integer overflow in gbufferedinputstreampeek bsc1257049...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : GLib vulnerability (USN-7971-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7971-1 advisory. It was discovered that GLib incorrectly handled the buffered input stream API. An attacker could use this issue to cause GLib to crash,...
SUSE CVE-2026-0988
A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...
USN-7971-1 glib2.0 vulnerability
It was discovered that GLib incorrectly handled the buffered input stream API. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code...
AZL-75020 CVE-2026-0988 affecting package glib 2.71.0-9
A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...
CVE-2026-0988
A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...
EUVD-2026-3684
A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...
CVE-2026-0988
A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...
CVE-2026-0988
CVE-2026-0988 : A flaw in glib2's g_buffered_input_stream_peek() allows an integer overflow during length calculation due to missing validation of offset/count, leading to an incorrect size passed to memcpy() and a potential buffer overflow, causing DoS. Connected advisories confirm this vulnerab...
Glib input validation vulnerability
Glib is a generic, portable utility library for the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, and main loop abstractions. Glib has a vulnerability related to input validation. This vulnerability stems from the...
MiracleLinux 8 : firefox-102.8.0-2.el8.ML.1 (AXSA:2023-5141:10)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-5141:10 advisory. Mozilla: Arbitrary memory write via PKCS 12 in NSS CVE-2023-0767 Mozilla: Content security policy leak in violation reports using iframes...
UBUNTU-CVE-2026-0988
A flaw was found in glib. Missing validation of offset and count parameters in the gbufferedinputstreampeek function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy, triggering...
PT-2026-3761
Name of the Vulnerable Software and Affected Versions glib affected versions not specified Description A flaw exists in glib due to missing validation of offset and count parameters within the g buffered input stream peek function. This can result in an integer overflow during length calculation...
CVE-2025-15222 Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization
A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readObject of the file SaSerializerTemplateForJdkUseBase64.java. Such manipulation leads to deserialization. The attack can be executed remotely. This attack is characterized by high...
CVE-2025-15222 Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization
A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readObject of the file SaSerializerTemplateForJdkUseBase64.java. Such manipulation leads to deserialization. The attack can be executed remotely. This attack is characterized by high...
Sa-Token 代码问题漏洞
Sa-Token is a lightweight Java authentication framework open source by dromara. A code issue vulnerability exists in Sa-Token 1.44.0 and earlier versions, which stems from a misuse of the function ObjectInputStream.readObject in the file SaSerializerTemplateForJdkUseBase64.java, which could lead ...
CVE-2025-15117 Dromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization
A weakness has been identified in Dromara Sa-Token up to 1.44.0. This affects the function ObjectInputStream.readObject of the file SaJdkSerializer.java. Executing manipulation can lead to deserialization. The attack may be launched remotely. This attack is characterized by high complexity. It is...