GNOME

Records403All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical33CVSS 9.0–10.0

CVSS high157CVSS 7.0–8.9

Exploited now

GNOME records in CISA KEV

No GNOME vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Libsoup 35 records HIGH Glib 33 records HIGH Evolution 21 records MEDIUM Gdk-pixbuf 20 records MEDIUM Gdm 15 records MEDIUM Gtk 15 records MEDIUM Epiphany 13 records HIGH Networkmanager 12 records LOW

Records

33 records in Glib · all components

TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

HIGH 76

A flaw was found in GLib.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00558 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +94 CWE-193

TI-2026-41772 CVE-2026-58011 · GHSA-8xmh-8wfg-9f6j

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

HIGH 72

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-125

TI-2025-03596 CVE-2025-4056 · GHSA-6gjq-8hm4-wjmq

Glib: glib crash after long command line

HIGH 66

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2025-07-28 Fixed in 2.84.1 CWE-94

TI-2023-15942 CVE-2023-32665 · GHSA-c9xj-rf55-c64g

Gvariant deserialisation does not match spec for non-normal data

MEDIUM 58

A flaw was found in GLib.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00392 Published 2023-09-14 Partial fix CWE-400

TI-2024-35203 CVE-2024-52533 · GHSA-5rq6-q8gw-qqpr

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant…

MEDIUM 52

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01507 Published 2024-11-11 Partial fix CWE-120

TI-2018-11777 CVE-2018-16428 · GHSA-wj6v-2jfm-gw75

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

MEDIUM 50

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04693 Published 2018-09-04 Will not fix CWE-476

TI-2019-09293 CVE-2019-12450 · GHSA-m54p-gqx6-f2r7

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly…

MEDIUM 47

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02624 Published 2019-05-29 Partial fix CWE-276

TI-2026-41777 CVE-2026-58016 · GHSA-8rpw-4xx7-27w7

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

MEDIUM 46

A flaw was found in GLib.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0056 Published 2026-06-30 Partial fix · 2.89.0, 2.80.4-12.el10_2.14 +52 CWE-191

TI-2025-12872 CVE-2025-14087 · GHSA-frh9-7wfp-w73p

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

MEDIUM 44

A flaw was found in GLib (Gnome Lib).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00826 Published 2025-12-10 Partial fix · 2.86.3, 2.80.4-10.el10_1.13 +37 CWE-190

TI-2012-00038 CVE-2012-0039 · GHSA-7w5v-h2pc-qqwc

GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values…

MEDIUM 43

GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of se…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02043 Published 2012-01-14 No fix listed CWE-310

TI-2026-41773 CVE-2026-58012 · GHSA-vwg8-37h9-g38g

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

MEDIUM 42

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00491 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-126

TI-2026-41771 CVE-2026-58010 · GHSA-m7rp-473c-296x

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

MEDIUM 42

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00491 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-126

TI-2021-08761 CVE-2021-27218 · GHSA-vvj7-w55j-xgmw

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.

MEDIUM 40

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0408 Published 2021-02-15 Partial fix CWE-681

TI-2019-09750 CVE-2019-13012 · GHSA-4cmr-h54h-4w78

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates…

LOW 39

The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using g_file_replace_contents (kfsb->file, contents, l…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03211 Published 2019-06-28 Partial fix CWE-732

TI-2018-11778 CVE-2018-16429 · GHSA-x96r-v34q-q4vv

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in…

LOW 39

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str().

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03532 Published 2018-09-04 Fix deferred CWE-125

TI-2021-08762 CVE-2021-27219 · GHSA-2wvj-9m7h-43j3

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.

LOW 38

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03063 Published 2021-02-15 Fixed CWE-681

TI-2026-41774 CVE-2026-58013 · GHSA-4x46-h598-64qr

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

LOW 37

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0071 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +86 CWE-126

TI-2020-17986 CVE-2020-35457 · GHSA-2fcx-98cm-5x99

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds…

LOW 35

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00574 Published 2020-12-14 No fix listed CWE-190

TI-2026-41776 CVE-2026-58015 · GHSA-hmpf-72wc-2r6x

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0084 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +91 CWE-22

TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4

Glib: integer overflow in in g_escape_uri_string()

LOW 34

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00346 Published 2025-11-26 Partial fix · 2.86.3, 2.80.4-10.el10_1.12 +31 CWE-190

TI-2023-15921 CVE-2023-32643 · GHSA-8jhw-fpw9-r227

Heap-based buffer overflow in glib

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00375 Published 2023-09-14 Fixed in 2.75.1 CWE-122

TI-2023-15915 CVE-2023-32636 · GHSA-79g9-vx8c-xfmq

Uncontrolled resource consumption in glib

LOW 34

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2023-09-14 Partial fix CWE-400

TI-2023-13867 CVE-2023-29499 · GHSA-794g-pjcw-ggfp

Gvariant offset table entry size is not checked in is_normal()

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2023-09-14 Partial fix CWE-400

TI-2009-03132 CVE-2009-3289 · GHSA-q7q8-g4m3-j3pq

The g_file_copy function in glib 2.0 sets the permissions of a target file to the…

LOW 34

The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Naut…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00359 Published 2009-09-22 No fix listed CWE-732

TI-2025-05464 CVE-2025-6052 · GHSA-99rj-3595-5frj

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

LOW 33

A flaw was found in how GLib’s GString manages memory when adding data to strings.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-06-13 Fix deferred CWE-190

Open these records in search →

Critical	33
High	157
Medium	182
Low	31
No CVSS	0