GL
Product
glib
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 19Medium 8Low 0
Watch
Add glib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58014 | 8.6 | Jun 30 | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" Affected: before 2.88.1 |
| CVE-2026-58013 | 8.2 | Jun 30 | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" Affected: before 2.88.1 |
| CVE-2026-58012 | 8.2 | Jun 30 | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() Affected: before 2.86.5; before 2.88.1 |
| CVE-2026-58010 | 8.2 | Jun 30 | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() Affected: before 2.86.5; before 2.88.1 |
| CVE-2023-32643 | 7.8 | Sep 14 | A flaw was found in GLib Affected: before 2.75.1 |
| CVE-2020-35457 | 7.8 | Dec 14 | GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries Affected: before 2.65.3 |
| CVE-2009-3289 | 7.8 | Sep 22 | The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of… Affected: 2.0 |
| CVE-2025-13601 | 7.7 | Nov 26 | Glib: integer overflow in in g_escape_uri_string() Affected: before 2.86.3 |
| CVE-2026-58015 | 7.5 | Jun 30 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive Affected: before 2.88.1 |
| CVE-2026-58011 | 7.5 | Jun 30 | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime Affected: before 2.86.5; before 2.88.1 |
| CVE-2025-4056 | 7.5 | Jul 28 | A flaw was found in GLib Affected: before 2.84.1 |
| CVE-2025-6052 | 7.5 | Jun 13 | A flaw was found in how GLib’s GString manages memory when adding data to strings Affected: 2.75.3 through 2.84.3 |
| CVE-2023-32636 | 7.5 | Sep 14 | A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499 Affected: before 2.74.4 |
| CVE-2023-29499 | 7.5 | Sep 14 | Gvariant offset table entry size is not checked in is_normal() Affected: before 2.74.4 |
| CVE-2021-27219 | 7.5 | Feb 15 | An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3 Affected: before 2.66.6; 2.67.0 before 2.67.3 |
| CVE-2021-27218 | 7.5 | Feb 15 | An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4 Affected: before 2.66.7; 2.67.0 before 2.67.4 |
| CVE-2019-13012 | 7.5 | Jun 28 | The keyfile settings backend in GNOME GLib (aka glib2.0) before 2.60.0 creates directories using g_file_make_directory_with_parents (kfsb->dir, NULL, NULL) and files using… Affected: 2.0.0 before 2.59.1 |
| CVE-2018-16429 | 7.5 | Sep 4 | GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf8_str() Affected: 2.56.1 |
| CVE-2012-0039 | 7.5 | Jan 14 | GLib 2.31.8 and earlier, when the g_str_hash function is used, computes hash values without restricting the ability to trigger hash collisions predictably, which allows… Affected: through 2.31.8; 1.1.12; 1.1.12-1; 1.1.15; 1.2.0; 1.2.1; +34 more |
Showing 19
