GL
Product
glib
by GNOME · last CVE Jun 30, 2026
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 19Medium 8Low 0
Watch

Add glib to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58014
8.6
1%
Jun 30
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Affected: before 2.88.1
CVE-2026-58013
8.2
1%
Jun 30
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Affected: before 2.88.1
CVE-2026-58012
8.2
0%
Jun 30
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Affected: before 2.86.5; before 2.88.1
CVE-2026-58010
8.2
0%
Jun 30
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Affected: before 2.86.5; before 2.88.1
CVE-2023-32643
7.8
0%
Sep 14
A flaw was found in GLib
Affected: before 2.75.1
CVE-2020-35457
7.8
1%
Dec 14
GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries
Affected: before 2.65.3
CVE-2009-3289
7.8
0%
Sep 22
The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of…
Affected: 2.0
CVE-2025-13601
7.7
0%
Nov 26
Glib: integer overflow in in g_escape_uri_string()
Affected: before 2.86.3
CVE-2026-58015
7.5
1%
Jun 30
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Affected: before 2.88.1
CVE-2026-58011
7.5
0%
Jun 30
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Affected: before 2.86.5; before 2.88.1
CVE-2025-4056
7.5
1%
Jul 28
A flaw was found in GLib
Affected: before 2.84.1
CVE-2025-6052
7.5
1%
Jun 13
A flaw was found in how GLib’s GString manages memory when adding data to strings
Affected: 2.75.3 through 2.84.3
CVE-2023-32636
7.5
1%
Sep 14
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499
Affected: before 2.74.4
CVE-2023-29499
7.5
1%
Sep 14
Gvariant offset table entry size is not checked in is_normal()
Affected: before 2.74.4
CVE-2021-27219
7.5
3%
Feb 15
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3
Affected: before 2.66.6; 2.67.0 before 2.67.3
CVE-2021-27218
7.5
4%
Feb 15
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4
Affected: before 2.66.7; 2.67.0 before 2.67.4
CVE-2019-13012
7.5
3%
Jun 28
The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using…
Affected: 2.0.0 before 2.59.1
CVE-2018-16429
7.5
4%
Sep 4
GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str()
Affected: 2.56.1
CVE-2012-0039
7.5
2%
Jan 14
GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows…
Affected: through 2.31.8; 1.1.12; 1.1.12-1; 1.1.15; 1.2.0; 1.2.1; +34 more
Showing 19