A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-develUpgrade glib2-staticUpgrade glib2-testsUpgrade mingw32-glib2-staticUpgrade glib2-famUpgrade mingw32-glib2Upgrade mingw64-glib2Upgrade glib2-docUpgrade mingw64-glib2-staticUpgrade glib2 | Aug 4, 2026 | Aug 3, 2026 |
| Amazon_linux_2023 | — | Upgrade glib2-develUpgrade glib2Upgrade glib2-debugsourceUpgrade glib2-devel-debuginfoUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-tests-debuginfoUpgrade glib2-docUpgrade glib2-debuginfo | Jul 21, 2026 | Jun 30, 2026 |
| Debian | — | Upgrade glib2.0 | Sep 21, 2026 | Jun 30, 2026 |
| Oracle_linux | — | Upgrade glib2-develUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-docUpgrade glib2Upgrade glib2-fam | Oct 22, 2026 | Jun 30, 2026 |
| Redhat Openshift | — | Upgrade rhcosUpgrade ose-rhel-coreos | Sep 16, 2026 | Apr 7, 2026 |
| Redhat_linux | — | Upgrade glib2-testsUpgrade glib2-docUpgrade glib2-debuginfoUpgrade mingw32-glib2-debuginfoNo solution existsUpgrade mingw32-glib2Upgrade glib2-fam-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2Upgrade glib2-famUpgrade mingw32-glib2-staticUpgrade glib2-develUpgrade mingw64-glib2-staticUpgrade mingw64-glib2-debuginfoUpgrade mingw64-glib2Upgrade glib2-staticUpgrade glib2-devel-debuginfoUpgrade glib2-debugsource | Jul 17, 2026 | Apr 7, 2026 |
| Rocky_linux | — | Upgrade glib2Upgrade glib2-testsUpgrade glib2-fam-debuginfoUpgrade glib2-famUpgrade glib2-tests-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-debugsourceUpgrade glib2-staticUpgrade glib2-debuginfoUpgrade glib2-devel | Aug 20, 2026 | Aug 17, 2026 |
| Ubuntu | — | Upgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-binUpgrade libglib2.0-0t64 | Sep 22, 2026 | Sep 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 23, 2026 | Jun 30, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub