A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-testsUpgrade glib2-develUpgrade glib2-staticUpgrade mingw32-glib2-staticUpgrade mingw64-glib2-staticUpgrade glib2Upgrade glib2-docUpgrade mingw64-glib2Upgrade mingw32-glib2Upgrade glib2-fam | May 12, 2026 | May 11, 2026 |
| Amazon Linux Ami 2 | — | Upgrade glib2-docUpgrade glib2-testsUpgrade glib2-debuginfoUpgrade glib2Upgrade glib2-develUpgrade glib2-staticUpgrade glib2-fam | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade glib2-tests-debuginfoUpgrade glib2-testsUpgrade glib2-docUpgrade glib2-debugsourceUpgrade glib2-debuginfoUpgrade glib2Upgrade glib2-devel-debuginfoUpgrade glib2-develUpgrade glib2-static | Jan 12, 2026 | Dec 5, 2025 |
| Debian | — | Upgrade glib2.0 | Dec 17, 2025 | Dec 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade glib2 | Mar 10, 2026 | Mar 10, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Oracle_linux | — | Upgrade glib2Upgrade glib2-docUpgrade glib2-testsUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-fam | May 13, 2026 | Dec 5, 2025 |
| Redhat_linux | — | Upgrade mingw32-glib2-staticUpgrade mingw64-glib2-staticUpgrade glib2-famUpgrade glib2-debuginfoUpgrade glib2-develUpgrade glib2-tests-debuginfoUpgrade glib2-staticUpgrade glib2-devel-debuginfoUpgrade glib2-debugsourceUpgrade mingw64-glib2-debuginfoUpgrade mingw32-glib2Upgrade glib2-testsUpgrade glib2Upgrade mingw32-glib2-debuginfoUpgrade mingw64-glib2No solution existsUpgrade glib2-docUpgrade glib2-fam-debuginfo | May 12, 2026 | Dec 5, 2025 |
| Rocky_linux | — | Upgrade glib2Upgrade glib2-fam-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-docUpgrade glib2-devel-debuginfoUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-debuginfoUpgrade glib2-debugsourceUpgrade glib2-develUpgrade glib2-fam | May 14, 2026 | May 13, 2026 |
| Ubuntu | — | Upgrade libglib2.0-0Upgrade libglib2.0-0t64Upgrade libglib2.0-0 (Ubuntu Pro)Upgrade libglib2.0-bin | Jan 7, 2026 | Dec 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub