Summary
It was discovered that GLib incorrectly parsed large Base64 data. An
attacker could use this issue to cause GLib to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2026-1484)
It was discovered that GLib incorrectly parsed certain treemagic files.
An attacker could use this issue to cause GLib to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2026-1485)
It was discovered that GLib incorrectly handled Unicode case conversion.
An attacker could use this issue to cause GLib to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2026-1489)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | glib2.0 | 2.72.4-0ubuntu2.9 |
| Ubuntu · 24.04 LTS 24.04:LTS | glib2.0 | 2.80.0-6ubuntu3.8 |
| Ubuntu · 25.10 | glib2.0 | 2.86.0-2ubuntu0.3 |
Vulnerabilities 3
-
Medium 5.4
Glib: glib: memory corruption via integer overflow in unicode case conversion
A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory alloca…
-
Medium 4.2
Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()
A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buf…
-
Low 2.8
Glib: glib: local denial of service via buffer underflow in content type parsing
A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow …