A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | adoptopenjdk-upgrade-latest | Feb 24, 2026 | Feb 24, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-glib2amazon-linux-2023-upgrade-glib2-debuginfoamazon-linux-2023-upgrade-glib2-debugsourceamazon-linux-2023-upgrade-glib2-develamazon-linux-2023-upgrade-glib2-devel-debuginfoamazon-linux-2023-upgrade-glib2-docamazon-linux-2023-upgrade-glib2-staticamazon-linux-2023-upgrade-glib2-testsamazon-linux-2023-upgrade-glib2-tests-debuginfo | Jul 11, 2025 | Jun 13, 2025 | |
| Azul Zulu | azul-zulu-jdk8azul-zulu-jdk11azul-zulu-jdk17azul-zulu-jdk21azul-zulu-jdk25 | Feb 25, 2026 | Jun 13, 2025 | |
| Eclipseadoptium | eclipseadoptium-upgrade-latest | Jun 26, 2026 | Jun 13, 2025 | |
| Jre Vuln | jre-upgrade-latest | Feb 3, 2026 | Jun 13, 2025 | |
| Redhat_linux | no-fix-redhat-rpm-package | Jul 9, 2025 | Jun 13, 2025 | |
| Suse | — | suse-upgrade-gio-branding-upstreamsuse-upgrade-glib2-develsuse-upgrade-glib2-devel-32bitsuse-upgrade-glib2-devel-staticsuse-upgrade-glib2-docsuse-upgrade-glib2-langsuse-upgrade-glib2-tests-develsuse-upgrade-glib2-toolssuse-upgrade-glib2-tools-32bitsuse-upgrade-libgio-2_0-0suse-upgrade-libgio-2_0-0-32bitsuse-upgrade-libgirepository-2_0-0suse-upgrade-libglib-2_0-0suse-upgrade-libglib-2_0-0-32bitsuse-upgrade-libgmodule-2_0-0suse-upgrade-libgmodule-2_0-0-32bitsuse-upgrade-libgobject-2_0-0suse-upgrade-libgobject-2_0-0-32bitsuse-upgrade-libgthread-2_0-0suse-upgrade-libgthread-2_0-0-32bitsuse-upgrade-typelib-1_0-gio-2_0suse-upgrade-typelib-1_0-girepository-3_0suse-upgrade-typelib-1_0-glib-2_0suse-upgrade-typelib-1_0-glibunix-2_0suse-upgrade-typelib-1_0-gmodule-2_0suse-upgrade-typelib-1_0-gobject-2_0 | Jul 1, 2025 | Jun 13, 2025 |
| Ubuntu | ubuntu-upgrade-libglib2-0-0ubuntu-upgrade-libglib2-0-0t64ubuntu-upgrade-libglib2-0-bin | Jul 4, 2025 | Jun 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub