CVE-2026-1489
Medium · 5.4CVSS
5.4
EPSS
0.4%
Published
Jan 27, 2026
CISA due date
—
The record
A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | glib2 | 0 | 2.78.6-150600.4.35.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 15.6 | glib2 | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 15.6 | glib2-doc | 0 | 2.78.6-150600.4.35.1 |
| openSUSE:Leap 16.0 | glib2 | 0 | 2.84.4-160000.2.1 |
| openSUSE:Leap 16.0 | glib2-doc | 0 | 2.84.4-160000.2.1 |
| openSUSE:Tumbleweed | glib2 | 0 | 2.86.3-3.1 |
Related vulnerabilities
- CVE-2026-1484 A flaw was found in the GLib Base64 encoding routine when processing very large input… Also affects glib2
- CVE-2026-1485 A flaw was found in Glib's content type parsing logic. Also affects glib2
- CVE-2026-0988 A flaw was found in glib. Also affects glib2
- CVE-2025-14512 A flaw was found in glib. Also affects glib2
- CVE-2025-14087 A flaw was found in GLib (Gnome Lib). Also affects glib2
- CVE-2025-13601 A heap-based buffer overflow problem was found in glib through an incorrect calculation… Also affects glib2
- CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant… Also affects glib2
- CVE-2024-34397 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Also affects glib2