Vulnerabilities

TI-2026-41777 CVE-2026-58016 · GHSA-8rpw-4xx7-27w7

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

MEDIUM 46

A flaw was found in GLib.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0056 Published 2026-06-30 Partial fix · 2.89.0, 2.80.4-12.el10_2.14 +52 CWE-191

TI-2026-41776 CVE-2026-58015 · GHSA-hmpf-72wc-2r6x

Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0084 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +91 CWE-22

TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243

Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

HIGH 76

A flaw was found in GLib.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00558 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +94 CWE-193

TI-2026-41774 CVE-2026-58013 · GHSA-4x46-h598-64qr

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

LOW 37

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0071 Published 2026-06-30 Partial fix · 2.88.1, 2.80.4-12.el10_2.21 +86 CWE-126

TI-2026-41773 CVE-2026-58012 · GHSA-vwg8-37h9-g38g

Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

MEDIUM 42

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00491 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-126

TI-2026-41772 CVE-2026-58011 · GHSA-8xmh-8wfg-9f6j

Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime

HIGH 72

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-125

TI-2026-41771 CVE-2026-58010 · GHSA-m7rp-473c-296x

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

MEDIUM 42

A flaw was found in GLib.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00491 Published 2026-06-30 Partial fix · 2.86.5, 2.88.1 +87 CWE-126

TI-2025-13255 CVE-2025-14512 · GHSA-2p5v-p767-wqv5

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

LOW 30

A flaw was found in glib.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00579 Published 2025-12-11 Partial fix · 2.86.3, 2.80.4-10.el10_1.13 +35 CWE-190

TI-2025-12872 CVE-2025-14087 · GHSA-frh9-7wfp-w73p

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

MEDIUM 44

A flaw was found in GLib (Gnome Lib).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00826 Published 2025-12-10 Partial fix · 2.86.3, 2.80.4-10.el10_1.13 +37 CWE-190

TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4

Glib: integer overflow in in g_escape_uri_string()

LOW 34

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00346 Published 2025-11-26 Partial fix · 2.86.3, 2.80.4-10.el10_1.12 +31 CWE-190

TI-2025-03596 CVE-2025-4056 · GHSA-6gjq-8hm4-wjmq

Glib: glib crash after long command line

HIGH 66

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00543 Published 2025-07-28 Fixed in 2.84.1 CWE-94

TI-2025-05464 CVE-2025-6052 · GHSA-99rj-3595-5frj

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

LOW 33

A flaw was found in how GLib’s GString manages memory when adding data to strings.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2025-06-13 Fix deferred CWE-190

TI-2024-35203 CVE-2024-52533 · GHSA-5rq6-q8gw-qqpr

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant…

MEDIUM 52

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01507 Published 2024-11-11 Partial fix CWE-120

TI-2024-22735 CVE-2024-34397 · GHSA-f632-c3rh-r2v2

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1.

LOW 25

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00763 Published 2024-05-07 Partial fix CWE-290

TI-2023-15915 CVE-2023-32636 · GHSA-79g9-vx8c-xfmq

Uncontrolled resource consumption in glib

LOW 34

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2023-09-14 Partial fix CWE-400

TI-2023-15921 CVE-2023-32643 · GHSA-8jhw-fpw9-r227

Heap-based buffer overflow in glib

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00375 Published 2023-09-14 Fixed in 2.75.1 CWE-122

TI-2023-15892 CVE-2023-32611 · GHSA-qjp4-g2mq-4r5w

G_variant_byteswap() can take a long time with some non-normal inputs

LOW 25

A flaw was found in GLib.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00361 Published 2023-09-14 Partial fix CWE-400

TI-2023-13867 CVE-2023-29499 · GHSA-794g-pjcw-ggfp

Gvariant offset table entry size is not checked in is_normal()

LOW 34

A flaw was found in GLib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2023-09-14 Partial fix CWE-400

TI-2023-15942 CVE-2023-32665 · GHSA-c9xj-rf55-c64g

Gvariant deserialisation does not match spec for non-normal data

MEDIUM 58

A flaw was found in GLib.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00392 Published 2023-09-14 Partial fix CWE-400

TI-2021-02731 CVE-2021-3800 · GHSA-58w9-h6f7-f979

Information disclosure in Glib

LOW 26

A flaw was found in glib before version 2.63.6.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00565 Published 2022-08-23 Partial fix CWE-200

TI-2021-09384 CVE-2021-28153 · GHSA-9hh6-p5c5-mmmf

An issue was discovered in GNOME GLib before 2.66.8.

LOW 29

An issue was discovered in GNOME GLib before 2.66.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02708 Published 2021-03-11 Partial fix CWE-59

TI-2021-08762 CVE-2021-27219 · GHSA-2wvj-9m7h-43j3

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.

LOW 38

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03063 Published 2021-02-15 Fixed CWE-681

TI-2021-08761 CVE-2021-27218 · GHSA-vvj7-w55j-xgmw

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.

MEDIUM 40

An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0408 Published 2021-02-15 Partial fix CWE-681

TI-2020-17986 CVE-2020-35457 · GHSA-2fcx-98cm-5x99

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds…

LOW 35

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00574 Published 2020-12-14 No fix listed CWE-190

TI-2020-05476 CVE-2020-6750 · GHSA-w778-hx63-vw7w

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target…

LOW 31

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxy_addr field is mishandled.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02195 Published 2020-01-09 No fix listed

Vulnerabilities

Filters