Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Glib Heap Buffer Overflow: Denial of Service Risk

published 6 months ago
Summary

A flaw in Glib's input/output handling code can cause a program to crash or become unresponsive when processing malicious data. This vulnerability affects systems that use Glib, potentially leading to service disruptions. To mitigate the risk, update to the latest version of Glib.

What to do
  • Update juliabinarywrappers glib_jll to version 2.86.3+0.
Affected software
Ecosystem VendorProductAffected versions
Julia juliabinarywrappers glib_jll < 2.86.3+0
Fix: upgrade to 2.86.3+0
Original advisory text
A flaw was found in glib
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) `escape_byte_string()` function when processing malicious file or remote filesystem attribute values.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Timeline
Published7 May 2026
Updated28 Jul 2026
First seen7 May 2026
Sources
JLSEC-2026-489 · OSV
Track software like this
Free during beta