Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
glib before 2.78.6‑9 may cause application crashes
published 9 months ago
Summary
The glib library (azure/glib) versions older than 2.78.6‑9 have a coding mistake that can miscalculate memory size and overwrite data. This can make programs unexpectedly stop running, resulting in a denial of service. Upgrade glib to version 2.78.6‑9 or later to fix the problem.
What to do
- Update azure glib to version 2.78.6-9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | glib |
< 2.78.6-9 Fix: upgrade to 2.78.6-9
|
Original advisory text
CVE-2026-0988 affecting package glib for versions less than 2.78.6-9
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).
References
Timeline
Published21 Jan 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-75017 · OSV
Track software like this
Free during beta