CVE-2026-0988
Low · 3.7CVSS
3.7
EPSS
0.4%
Published
Jan 21, 2026
CISA due date
—
The record
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | glib2.0 | 0 | 2.76.3-1.6.mga9 |
| SUSE:Linux Enterprise Micro 5.2 | glib2 | 0 | 2.62.6-150200.3.39.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | glib2 | 0 | 2.78.6-150600.4.28.1 |
| openSUSE:Leap 15.6 | glib2 | 0 | 2.78.6-150600.4.28.1 |
| openSUSE:Leap 15.6 | glib2-doc | 0 | 2.78.6-150600.4.28.1 |
| openSUSE:Leap 16.0 | glib2 | 0 | 2.84.4-160000.2.1 |
| openSUSE:Leap 16.0 | glib2-doc | 0 | 2.84.4-160000.2.1 |
| openSUSE:Tumbleweed | glib2 | 0 | 2.86.3-2.1 |
Related vulnerabilities
- CVE-2025-14512 A flaw was found in glib. Also affects glib2.0
- CVE-2025-14087 A flaw was found in GLib (Gnome Lib). Also affects glib2.0
- CVE-2025-13601 A heap-based buffer overflow problem was found in glib through an incorrect calculation… Also affects glib2.0
- CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant… Also affects glib2.0
- CVE-2024-34397 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Also affects glib2.0
- CVE-2026-1489 A flaw was found in GLib. Also affects glib2
- CVE-2026-1484 A flaw was found in the GLib Base64 encoding routine when processing very large input… Also affects glib2
- CVE-2026-1485 A flaw was found in Glib's content type parsing logic. Also affects glib2