A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | — | — | Feb 24, 2026 | Feb 24, 2026 |
| Amazon_linux_2023 | — | Upgrade glib2-debugsourceUpgrade glib2-tests-debuginfoUpgrade glib2Upgrade glib2-develUpgrade glib2-docUpgrade glib2-devel-debuginfoUpgrade glib2-debuginfoUpgrade glib2-staticUpgrade glib2-tests | Jul 11, 2025 | Jun 13, 2025 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 11 installer 11.85.12 (JDK 11.0.29.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 8 installer 8.91.0.12 (JDK 8u481-b01, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 17 installer 17.63.12 (JDK 17.0.17.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 25 installer 25.31.14 (JDK 25.0.1.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 21 installer 21.47.14 (JDK 21.0.9.0.101+1, quarterly CPU) (LTS stream) | Feb 25, 2026 | Jun 13, 2025 |
| Debian | — | Upgrade glib2.0 | Jul 23, 2026 | Jul 23, 2026 |
| Eclipseadoptium | — | — | Jun 26, 2026 | Jun 13, 2025 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Feb 3, 2026 | Jun 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 13, 2025 |
| Suse | — | Upgrade libgobject-2_0-0Upgrade libgirepository-2_0-0Upgrade typelib-1_0-Gio-2_0Upgrade libgmodule-2_0-0Upgrade typelib-1_0-GIRepository-3_0Upgrade libgio-2_0-0-32bitUpgrade libgmodule-2_0-0-32bitUpgrade glib2-toolsUpgrade glib2-langUpgrade libgthread-2_0-0Upgrade glib2-tools-32bitUpgrade libgio-2_0-0Upgrade typelib-1_0-GModule-2_0Upgrade typelib-1_0-GLib-2_0Upgrade libglib-2_0-0Upgrade libgobject-2_0-0-32bitUpgrade glib2-docUpgrade glib2-devel-staticUpgrade typelib-1_0-GObject-2_0Upgrade typelib-1_0-GLibUnix-2_0Upgrade glib2-devel-32bitUpgrade glib2-tests-develUpgrade glib2-develUpgrade libglib-2_0-0-32bitUpgrade libgthread-2_0-0-32bitUpgrade gio-branding-upstream | Jul 1, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade libglib2.0-0t64Upgrade libglib2.0-0Upgrade libglib2.0-bin | Jul 4, 2025 | Jun 13, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub