Advisories · Technology
GNOME GLib.
Every CVE that names GNOME GLib among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- GNOME GLib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.9 Medium
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
- GNOME GLib
- Red Hat Enterprise Linux 10
- Path traversal
- CVSS 7.3 High
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-193
- CVSS 6.5 Medium
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-126
- CVSS 6.5 Medium
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-126
- CVSS 6.5 Medium
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
- GNOME GLib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.5 Medium
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
- GNOME GLib
- Red Hat Enterprise Linux 10
- CWE-126
- CVSS 6.5 Medium
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
- GNOME glib
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.6 Medium
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
- GNOME glib
- Red Hat Enterprise Linux 10
- Memory corruption