A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2Upgrade glib2-staticUpgrade glib2-develUpgrade glib2-testsUpgrade glib2-famUpgrade glib2-doc | May 12, 2026 | May 11, 2026 |
| Debian | — | Upgrade glib2.0 | Dec 17, 2025 | Dec 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade glib2 | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Oracle_linux | — | Upgrade glib2-famUpgrade glib2-develUpgrade glib2Upgrade glib2-docUpgrade glib2-testsUpgrade glib2-static | May 13, 2026 | Dec 11, 2025 |
| Redhat_linux | — | Upgrade glib2-famNo solution existsUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2Upgrade glib2-tests-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-docUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfo | May 12, 2026 | Dec 11, 2025 |
| Rocky_linux | — | Upgrade glib2-debuginfoUpgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-fam-debuginfoUpgrade glib2-famUpgrade glib2-docUpgrade glib2-staticUpgrade glib2-tests-debuginfoUpgrade glib2-testsUpgrade glib2 | May 14, 2026 | May 13, 2026 |
| Ubuntu | — | Upgrade glib2.0 | Jan 7, 2026 | Dec 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub