A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | — | — | Feb 24, 2026 | Feb 24, 2026 |
| Amazon_linux_2023 | — | Upgrade glib2-develUpgrade glib2Upgrade glib2-tests-debuginfoUpgrade glib2-debugsourceUpgrade glib2-docUpgrade glib2-devel-debuginfoUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-debuginfo | Jul 11, 2025 | Jun 13, 2025 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 8 installer 8.91.0.12 (JDK 8u481-b01, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 17 installer 17.63.12 (JDK 17.0.17.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 11 installer 11.85.12 (JDK 11.0.29.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 25 installer 25.31.14 (JDK 25.0.1.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 21 installer 21.47.14 (JDK 21.0.9.0.101+1, quarterly CPU) (LTS stream) | Feb 25, 2026 | Jun 13, 2025 |
| Debian | — | Upgrade glib2.0 | Jul 23, 2026 | Jul 23, 2026 |
| Eclipseadoptium | — | — | Jun 26, 2026 | Jun 13, 2025 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Feb 3, 2026 | Jun 13, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 13, 2025 |
| Suse | — | Upgrade gio-branding-upstreamUpgrade libglib-2_0-0Upgrade typelib-1_0-GLib-2_0Upgrade glib2-tests-develUpgrade glib2-docUpgrade glib2-devel-staticUpgrade libgthread-2_0-0-32bitUpgrade typelib-1_0-GObject-2_0Upgrade libglib-2_0-0-32bitUpgrade typelib-1_0-GLibUnix-2_0Upgrade glib2-develUpgrade typelib-1_0-GModule-2_0Upgrade libgobject-2_0-0-32bitUpgrade glib2-devel-32bitUpgrade libgmodule-2_0-0-32bitUpgrade glib2-toolsUpgrade libgio-2_0-0-32bitUpgrade glib2-tools-32bitUpgrade libgthread-2_0-0Upgrade libgobject-2_0-0Upgrade libgirepository-2_0-0Upgrade glib2-langUpgrade typelib-1_0-Gio-2_0Upgrade libgmodule-2_0-0Upgrade typelib-1_0-GIRepository-3_0Upgrade libgio-2_0-0 | Jul 1, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade libglib2.0-0t64Upgrade libglib2.0-0Upgrade libglib2.0-bin | Jul 4, 2025 | Jun 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub