A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade glib2-debuginfoUpgrade glib2-docUpgrade glib2-develUpgrade glib2-devel-debuginfoUpgrade glib2-debugsourceUpgrade glib2Upgrade glib2-testsUpgrade glib2-tests-debuginfoUpgrade glib2-static | Jul 11, 2025 | Apr 7, 2025 |
| Debian | — | Upgrade glib2.0 | Apr 15, 2025 | Apr 7, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade glib2 | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 7, 2025 |
| Suse | — | Upgrade glib2-devel-staticUpgrade glib2-langUpgrade libgobject-2_0-0-32bitUpgrade glib2-devel-32bitUpgrade glib2-docUpgrade libgirepository-2_0-0Upgrade gio-branding-upstreamUpgrade typelib-1_0-GLibUnix-2_0Upgrade typelib-1_0-GObject-2_0Upgrade libgthread-2_0-0-32bitUpgrade glib2-develUpgrade libgobject-2_0-0Upgrade glib2-tools-32bitUpgrade typelib-1_0-Gio-2_0Upgrade typelib-1_0-GIRepository-3_0Upgrade libgio-2_0-0Upgrade libglib-2_0-0Upgrade libglib-2_0-0-32bitUpgrade libgthread-2_0-0Upgrade typelib-1_0-GModule-2_0Upgrade glib2-tests-develUpgrade libgmodule-2_0-0Upgrade libgio-2_0-0-32bitUpgrade typelib-1_0-GLib-2_0Upgrade libgmodule-2_0-0-32bitUpgrade glib2-tools | Apr 25, 2025 | Apr 7, 2025 |
| Ubuntu | — | Upgrade libglib2.0-binUpgrade libglib2.0-0t64Upgrade libglib2.0-0 | Jan 7, 2026 | Apr 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Apr 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub