Summary
It was discovered that GLib incorrectly handled the buffered input stream
API. An attacker could use this issue to cause GLib to crash, resulting in
a denial of service, or possibly execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | glib2.0 | 2.72.4-0ubuntu2.8 |
| Ubuntu · 24.04 LTS 24.04:LTS | glib2.0 | 2.80.0-6ubuntu3.7 |
| Ubuntu · 25.10 | glib2.0 | 2.86.0-2ubuntu0.2 |
Vulnerabilities 1
-
Low 3.7
Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incor…
References
-
report
https://ubuntu.com/security/CVE-2026-0988