CVE-2026-1485
Low · 2.8CVSS
2.8
EPSS
0.2%
Published
Jan 27, 2026
CISA due date
—
The record
A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | glib2 | 0 | 2.78.6-150600.4.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 15.6 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 15.6 | glib2-doc | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 16.0 | glib2 | 0 | 2.84.4-160000.2.1 |
| openSUSE:Leap 16.0 | glib2-doc | 0 | 2.84.4-160000.2.1 |
| openSUSE:Tumbleweed | glib2 | 0 | 2.86.3-3.1 |
Related vulnerabilities
- CVE-2026-1489 A flaw was found in GLib. Also affects glib2
- CVE-2026-1484 A flaw was found in the GLib Base64 encoding routine when processing very large input… Also affects glib2
- CVE-2026-0988 A flaw was found in glib. Also affects glib2
- CVE-2025-14512 A flaw was found in glib. Also affects glib2
- CVE-2025-14087 A flaw was found in GLib (Gnome Lib). Also affects glib2
- CVE-2025-13601 A heap-based buffer overflow problem was found in glib through an incorrect calculation… Also affects glib2
- CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant… Also affects glib2
- CVE-2024-34397 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Also affects glib2