Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Glib Denial of Service Vulnerability in Backported Fix
published 1 year ago
Summary
A potential denial of service issue exists in some versions of Glib. This issue affects distributors who applied a patch to fix a previous vulnerability. Users who have applied this patch should consider reapplying a new version to avoid potential performance issues.
What to do
- Update juliabinarywrappers glib_jll to version 2.76.5+0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Julia | juliabinarywrappers | glib_jll |
< 2.76.5+0 Fix: upgrade to 2.76.5+0
|
Original advisory text
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of...
A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published19 Oct 2025
Updated23 Jul 2026
First seen23 Jul 2026
Sources
JLSEC-2025-162 · OSV
Track software like this
Free during beta