CVE-2026-1484
Medium · 4.2CVSS
4.2
EPSS
0.3%
Published
Jan 27, 2026
CISA due date
—
The record
A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | glib2 | 0 | 2.78.6-150600.4.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 15.6 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 15.6 | glib2-doc | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 16.0 | glib2 | 0 | 2.84.4-160000.2.1 |
| openSUSE:Leap 16.0 | glib2-doc | 0 | 2.84.4-160000.2.1 |
| openSUSE:Tumbleweed | glib2 | 0 | 2.86.3-3.1 |
Related vulnerabilities
- CVE-2026-1489 A flaw was found in GLib. Also affects glib2
- CVE-2026-1485 A flaw was found in Glib's content type parsing logic. Also affects glib2
- CVE-2026-0988 A flaw was found in glib. Also affects glib2
- CVE-2025-14512 A flaw was found in glib. Also affects glib2
- CVE-2025-14087 A flaw was found in GLib (Gnome Lib). Also affects glib2
- CVE-2025-13601 A heap-based buffer overflow problem was found in glib through an incorrect calculation… Also affects glib2
- CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant… Also affects glib2
- CVE-2024-34397 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Also affects glib2