A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-docUpgrade glib2Upgrade glib2-famUpgrade mingw64-glib2Upgrade mingw64-glib2-staticUpgrade mingw32-glib2-staticUpgrade glib2-develUpgrade glib2-staticUpgrade mingw32-glib2Upgrade glib2-tests | Jul 21, 2026 | Jul 20, 2026 |
| Amazon Linux Ami 2 | — | Upgrade glib2-develUpgrade glib2-staticUpgrade glib2-docUpgrade glib2Upgrade glib2-testsUpgrade glib2-famUpgrade glib2-debuginfo | Jul 22, 2026 | Jul 22, 2026 |
| Amazon_linux_2023 | — | Upgrade glib2-tests-debuginfoUpgrade glib2-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-debugsourceUpgrade glib2Upgrade glib2-docUpgrade glib2-tests | Jul 21, 2026 | Jun 30, 2026 |
| Debian | — | Upgrade glib2.0 | Sep 21, 2026 | Jun 30, 2026 |
| Redhat_linux | — | Upgrade glib2-debugsourceUpgrade mingw32-glib2Upgrade mingw64-glib2-staticUpgrade glib2-develUpgrade glib2-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-staticUpgrade glib2-docUpgrade glib2-tests-debuginfoUpgrade glib2Upgrade glib2-famUpgrade mingw64-glib2No solution existsUpgrade glib2-fam-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade mingw32-glib2-staticUpgrade mingw32-glib2-debuginfoUpgrade glib2-tests | Jul 17, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade glib2-staticUpgrade glib2-debuginfoUpgrade glib2-develUpgrade glib2-tests-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-famUpgrade glib2-fam-debuginfoUpgrade glib2-debugsourceUpgrade glib2-testsUpgrade glib2 | Jul 27, 2026 | Jul 21, 2026 |
| Ubuntu | — | Upgrade libglib2.0-binUpgrade libglib2.0-bin (Ubuntu Pro)Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-0t64Upgrade libglib2.0-0 | Sep 22, 2026 | Sep 21, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 27, 2026 | Jun 30, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub