A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade glib2-debuginfoUpgrade glib2-docUpgrade glib2-testsUpgrade glib2-develUpgrade glib2-staticUpgrade glib2-debugsourceUpgrade glib2Upgrade glib2-tests-debuginfoUpgrade glib2-devel-debuginfo | Jul 11, 2025 | Apr 7, 2025 |
| Debian | — | Upgrade glib2.0 | Apr 15, 2025 | Apr 7, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade glib2 | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 7, 2025 |
| Suse | — | Upgrade libgirepository-2_0-0Upgrade glib2-devel-32bitUpgrade glib2-docUpgrade gio-branding-upstreamUpgrade libgobject-2_0-0-32bitUpgrade typelib-1_0-GLibUnix-2_0Upgrade glib2-tools-32bitUpgrade glib2-develUpgrade typelib-1_0-GObject-2_0Upgrade glib2-devel-staticUpgrade libgobject-2_0-0Upgrade glib2-langUpgrade libgthread-2_0-0-32bitUpgrade glib2-tests-develUpgrade glib2-toolsUpgrade typelib-1_0-GLib-2_0Upgrade typelib-1_0-Gio-2_0Upgrade libgthread-2_0-0Upgrade typelib-1_0-GModule-2_0Upgrade libgmodule-2_0-0-32bitUpgrade libglib-2_0-0-32bitUpgrade typelib-1_0-GIRepository-3_0Upgrade libglib-2_0-0Upgrade libgio-2_0-0Upgrade libgio-2_0-0-32bitUpgrade libgmodule-2_0-0 | Apr 25, 2025 | Apr 7, 2025 |
| Ubuntu | — | Upgrade libglib2.0-0Upgrade libglib2.0-binUpgrade libglib2.0-0t64 | Jan 7, 2026 | Apr 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub