A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mingw32-glib2-staticUpgrade mingw64-glib2-staticUpgrade mingw64-glib2Upgrade mingw32-glib2 | Aug 4, 2026 | Aug 3, 2026 |
| Amazon_linux_2023 | — | Upgrade glib2-debugsourceUpgrade glib2-develUpgrade glib2-devel-debuginfoUpgrade glib2-testsUpgrade glib2-tests-debuginfoUpgrade glib2-staticUpgrade glib2-debuginfoUpgrade glib2-docUpgrade glib2 | Jul 21, 2026 | Jun 30, 2026 |
| Debian | — | Upgrade glib2.0 | Sep 21, 2026 | Jun 30, 2026 |
| Redhat_linux | — | Upgrade glib2-develUpgrade glib2-tests-debuginfoUpgrade glib2-staticUpgrade glib2-debugsourceUpgrade glib2-docUpgrade glib2Upgrade glib2-devel-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-testsUpgrade mingw64-glib2-staticUpgrade glib2-debuginfoNo solution existsUpgrade glib2-famUpgrade mingw32-glib2-debuginfoUpgrade mingw64-glib2Upgrade mingw32-glib2-staticUpgrade mingw32-glib2 | Jul 17, 2026 | Apr 3, 2026 |
| Rocky_linux | — | Upgrade glib2-staticUpgrade glib2-debugsourceUpgrade glib2-famUpgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2Upgrade glib2-fam-debuginfoUpgrade glib2-tests | Aug 20, 2026 | Aug 17, 2026 |
| Ubuntu | — | Upgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-binUpgrade libglib2.0-0t64Upgrade libglib2.0-0 | Sep 22, 2026 | Sep 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 2, 2026 | Jun 30, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub