CVE-2026-0988 — Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

Affected: Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

USN-7971-1 — glib2.0 vulnerability

Affected: Ubuntu:22.04:LTS: glib2.0, Ubuntu:24.04:LTS: glib2.0, Ubuntu:25.10: glib2.0

It was discovered that GLib incorrectly handled the buffered input stream API. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code.

Most recent entries from all

CVE-2026-0988 — Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

USN-7971-1 — glib2.0 vulnerability