A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
CVSS Details
- CVSS 3.1 Base Score: 4.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-testsUpgrade glib2-develUpgrade glib2-docUpgrade glib2-staticUpgrade glib2Upgrade glib2-fam | Jul 18, 2025 | May 6, 2025 |
| Debian | — | Upgrade glib2.0 | May 15, 2025 | May 6, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Aug 13, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Sep 15, 2025 | Aug 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade glib2 | Oct 24, 2025 | Aug 9, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade glib2-staticUpgrade glib2-testsUpgrade glib2-develUpgrade glib2-docUpgrade glib2-famUpgrade glib2 | Jul 17, 2025 | May 6, 2025 |
| Redhat_linux | — | Upgrade glib2-docUpgrade glib2No solution existsUpgrade glib2-testsUpgrade glib2-famUpgrade glib2-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2-staticUpgrade glib2-develUpgrade glib2-fam-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-debugsource | Jul 9, 2025 | May 6, 2025 |
| Rocky_linux | — | Upgrade glib2-testsUpgrade glib2-devel-debuginfoUpgrade glib2-fam-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-famUpgrade glib2-develUpgrade glib2-debugsourceUpgrade glib2-docUpgrade glib2-staticUpgrade glib2-debuginfoUpgrade glib2 | Feb 5, 2026 | Jul 29, 2025 |
| Suse | — | Upgrade libgthread-2_0-0-32bitUpgrade glib2-toolsUpgrade glib2-docUpgrade libgobject-2_0-0-32bitUpgrade libgmodule-2_0-0-32bitUpgrade glib2-devel-staticUpgrade glib2-tools-32bitUpgrade libgthread-2_0-0Upgrade libgmodule-2_0-0Upgrade libglib-2_0-0-32bitUpgrade libgio-2_0-0-32bitUpgrade glib2-tests-develUpgrade glib2-develUpgrade gio-branding-upstreamUpgrade libglib-2_0-0Upgrade libgio-2_0-0Upgrade glib2-langUpgrade libgobject-2_0-0Upgrade glib2-devel-32bit | Jul 1, 2025 | May 6, 2025 |
| Ubuntu | — | Upgrade libglib2.0-0t64Upgrade libglib2.0-binUpgrade libglib2.0-0 | May 27, 2025 | May 6, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | May 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub