Vulnerability-Lookup

SUSE-SU-2026:0355-1

Vulnerability from csaf_suse - Published: 2026-01-31 02:04 - Updated: 2026-01-31 02:04

Summary

Security update for glib2

Notes

Title of the patch

Security update for glib2

Description of the patch

This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354). - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalculated buffer boundaries in the Base64 encoding routine (bsc#1257355). - CVE-2026-1489: Fixed undersized heap allocation followed by out-of-bounds access due to integer overflow in Unicode case conversion (bsc#1257353).

Patchnames

SUSE-2026-355,SUSE-SUSE-MicroOS-5.2-2026-355

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for glib2",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for glib2 fixes the following issues:\n\n- CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing (bsc#1257354).\n- CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalculated buffer boundaries in the Base64 encoding routine (bsc#1257355).\n- CVE-2026-1489: Fixed undersized heap allocation followed by out-of-bounds access due to integer overflow in Unicode case conversion (bsc#1257353).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-355,SUSE-SUSE-MicroOS-5.2-2026-355",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_0355-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:0355-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20260355-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:0355-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-February/024001.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257353",
        "url": "https://bugzilla.suse.com/1257353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257354",
        "url": "https://bugzilla.suse.com/1257354"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257355",
        "url": "https://bugzilla.suse.com/1257355"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-1484 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-1484/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-1485 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-1485/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-1489 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-1489/"
      }
    ],
    "title": "Security update for glib2",
    "tracking": {
      "current_release_date": "2026-01-31T02:04:37Z",
      "generator": {
        "date": "2026-01-31T02:04:37Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:0355-1",
      "initial_release_date": "2026-01-31T02:04:37Z",
      "revision_history": [
        {
          "date": "2026-01-31T02:04:37Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "glib2-devel-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "glib2-devel-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "glib2-devel-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-devel-static-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "glib2-devel-static-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "glib2-devel-static-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tests-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "glib2-tests-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "glib2-tests-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tools-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "glib2-tools-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "glib2-tools-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "libgio-2_0-0-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-fam-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "libgio-fam-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "libgio-fam-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "libglib-2_0-0-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.aarch64",
                "product": {
                  "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.aarch64",
                  "product_id": "libgthread-2_0-0-2.62.6-150200.3.42.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "glib2-devel-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "glib2-devel-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "glib2-devel-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tools-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "glib2-tools-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "glib2-tools-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "libgio-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "libgio-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-fam-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "libgio-fam-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "libgio-fam-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libglib-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "libglib-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "libglib-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libgmodule-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "libgmodule-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "libgmodule-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libgobject-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "libgobject-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "libgobject-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libgthread-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                "product": {
                  "name": "libgthread-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32",
                  "product_id": "libgthread-2_0-0-64bit-2.62.6-150200.3.42.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "glib2-devel-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "glib2-devel-2.62.6-150200.3.42.1.i586",
                  "product_id": "glib2-devel-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-devel-static-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "glib2-devel-static-2.62.6-150200.3.42.1.i586",
                  "product_id": "glib2-devel-static-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tests-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "glib2-tests-2.62.6-150200.3.42.1.i586",
                  "product_id": "glib2-tests-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tools-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "glib2-tools-2.62.6-150200.3.42.1.i586",
                  "product_id": "glib2-tools-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-2_0-0-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "libgio-2_0-0-2.62.6-150200.3.42.1.i586",
                  "product_id": "libgio-2_0-0-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-fam-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "libgio-fam-2.62.6-150200.3.42.1.i586",
                  "product_id": "libgio-fam-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libglib-2_0-0-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "libglib-2_0-0-2.62.6-150200.3.42.1.i586",
                  "product_id": "libglib-2_0-0-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.i586",
                  "product_id": "libgmodule-2_0-0-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.i586",
                  "product_id": "libgobject-2_0-0-2.62.6-150200.3.42.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.i586",
                "product": {
                  "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.i586",
                  "product_id": "libgthread-2_0-0-2.62.6-150200.3.42.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gio-branding-upstream-2.62.6-150200.3.42.1.noarch",
                "product": {
                  "name": "gio-branding-upstream-2.62.6-150200.3.42.1.noarch",
                  "product_id": "gio-branding-upstream-2.62.6-150200.3.42.1.noarch"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-lang-2.62.6-150200.3.42.1.noarch",
                "product": {
                  "name": "glib2-lang-2.62.6-150200.3.42.1.noarch",
                  "product_id": "glib2-lang-2.62.6-150200.3.42.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "glib2-devel-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "glib2-devel-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "glib2-devel-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-devel-static-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "glib2-devel-static-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "glib2-devel-static-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tests-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "glib2-tests-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "glib2-tests-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tools-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "glib2-tools-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "glib2-tools-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "libgio-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "libgio-2_0-0-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-fam-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "libgio-fam-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "libgio-fam-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libglib-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "libglib-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "libglib-2_0-0-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "libgmodule-2_0-0-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "libgobject-2_0-0-2.62.6-150200.3.42.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                "product": {
                  "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.ppc64le",
                  "product_id": "libgthread-2_0-0-2.62.6-150200.3.42.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "glib2-devel-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "glib2-devel-2.62.6-150200.3.42.1.s390x",
                  "product_id": "glib2-devel-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-devel-static-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "glib2-devel-static-2.62.6-150200.3.42.1.s390x",
                  "product_id": "glib2-devel-static-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tests-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "glib2-tests-2.62.6-150200.3.42.1.s390x",
                  "product_id": "glib2-tests-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tools-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "glib2-tools-2.62.6-150200.3.42.1.s390x",
                  "product_id": "glib2-tools-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
                  "product_id": "libgio-2_0-0-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-fam-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "libgio-fam-2.62.6-150200.3.42.1.s390x",
                  "product_id": "libgio-fam-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
                  "product_id": "libglib-2_0-0-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
                  "product_id": "libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
                  "product_id": "libgobject-2_0-0-2.62.6-150200.3.42.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.s390x",
                "product": {
                  "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.s390x",
                  "product_id": "libgthread-2_0-0-2.62.6-150200.3.42.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "glib2-devel-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "glib2-devel-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "glib2-devel-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-devel-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "glib2-devel-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "glib2-devel-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-devel-static-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "glib2-devel-static-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "glib2-devel-static-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tests-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "glib2-tests-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "glib2-tests-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tools-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "glib2-tools-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "glib2-tools-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "glib2-tools-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "glib2-tools-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "glib2-tools-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgio-2_0-0-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgio-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgio-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-fam-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgio-fam-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgio-fam-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgio-fam-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgio-fam-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgio-fam-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libglib-2_0-0-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libglib-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libglib-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libglib-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgmodule-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgmodule-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgmodule-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgobject-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgobject-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgobject-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgthread-2_0-0-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgthread-2_0-0-2.62.6-150200.3.42.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgthread-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                "product": {
                  "name": "libgthread-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64",
                  "product_id": "libgthread-2_0-0-32bit-2.62.6-150200.3.42.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.2",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.2",
                  "product_id": "SUSE Linux Enterprise Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glib2-tools-2.62.6-150200.3.42.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64"
        },
        "product_reference": "glib2-tools-2.62.6-150200.3.42.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glib2-tools-2.62.6-150200.3.42.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x"
        },
        "product_reference": "glib2-tools-2.62.6-150200.3.42.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "glib2-tools-2.62.6-150200.3.42.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64"
        },
        "product_reference": "glib2-tools-2.62.6-150200.3.42.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgio-2_0-0-2.62.6-150200.3.42.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64"
        },
        "product_reference": "libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgio-2_0-0-2.62.6-150200.3.42.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x"
        },
        "product_reference": "libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgio-2_0-0-2.62.6-150200.3.42.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64"
        },
        "product_reference": "libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libglib-2_0-0-2.62.6-150200.3.42.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64"
        },
        "product_reference": "libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libglib-2_0-0-2.62.6-150200.3.42.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x"
        },
        "product_reference": "libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libglib-2_0-0-2.62.6-150200.3.42.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64"
        },
        "product_reference": "libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64"
        },
        "product_reference": "libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x"
        },
        "product_reference": "libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64"
        },
        "product_reference": "libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64"
        },
        "product_reference": "libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x"
        },
        "product_reference": "libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
        },
        "product_reference": "libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-1484",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-1484"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-1484",
          "url": "https://www.suse.com/security/cve/CVE-2026-1484"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257355 for CVE-2026-1484",
          "url": "https://bugzilla.suse.com/1257355"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-31T02:04:37Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-1484"
    },
    {
      "cve": "CVE-2026-1485",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-1485"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in Glib\u0027s content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-1485",
          "url": "https://www.suse.com/security/cve/CVE-2026-1485"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257354 for CVE-2026-1485",
          "url": "https://bugzilla.suse.com/1257354"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-31T02:04:37Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-1485"
    },
    {
      "cve": "CVE-2026-1489",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-1489"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-1489",
          "url": "https://www.suse.com/security/cve/CVE-2026-1489"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257353 for CVE-2026-1489",
          "url": "https://bugzilla.suse.com/1257353"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:glib2-tools-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgio-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libglib-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgmodule-2_0-0-2.62.6-150200.3.42.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libgobject-2_0-0-2.62.6-150200.3.42.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-01-31T02:04:37Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-1489"
    }
  ]
}

CVE-2026-1484 (GCVE-0-2026-1484)

Vulnerability from cvelistv5 – Published: 2026-01-27 13:41 – Updated: 2026-01-27 15:12

Title

Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()

Summary

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.

Severity ?

4.2 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

CWE

CWE-787 - Out-of-bounds Write

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/security/cve/CVE-2026-1484	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2433259	issue-trackingx_refsource_REDHAT

Impacted products

Vendor

Product

Version

Red Hat

Red Hat Enterprise Linux 10

cpe:/o:redhat:enterprise_linux:10

Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Credits

Red Hat would like to thank treeplus for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1484",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-27T15:11:56.910934Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-27T15:12:08.672Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "bootc",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "glycin-loaders",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "loupe",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "papers",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "rpm-ostree",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "librsvg2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "bootc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "librsvg2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank treeplus for reporting this issue."
        }
      ],
      "datePublic": "2026-01-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-27T13:41:54.223Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-1484"
        },
        {
          "name": "RHBZ#2433259",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433259"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-01-27T11:57:23.744000+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-01-27T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "(CWE-190|CWE-124|CWE-787): Integer Overflow or Wraparound or Buffer Underwrite (\u0027Buffer Underflow\u0027) or Out-of-bounds Write"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-1484",
    "datePublished": "2026-01-27T13:41:54.223Z",
    "dateReserved": "2026-01-27T11:58:49.994Z",
    "dateUpdated": "2026-01-27T15:12:08.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-1489 (GCVE-0-2026-1489)

Vulnerability from cvelistv5 – Published: 2026-01-27 14:26 – Updated: 2026-01-27 15:09

Title

Glib: glib: memory corruption via integer overflow in unicode case conversion

Summary

A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable.

Severity ?

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

CWE

CWE-787 - Out-of-bounds Write

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/security/cve/CVE-2026-1489	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2433348	issue-trackingx_refsource_REDHAT

Impacted products

Vendor

Product

Version

Red Hat

Red Hat Enterprise Linux 10

cpe:/o:redhat:enterprise_linux:10

Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Credits

Red Hat would like to thank treeplus for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1489",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-27T15:09:00.703183Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-27T15:09:09.527Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "bootc",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "glycin-loaders",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "loupe",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "papers",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "rpm-ostree",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "librsvg2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "bootc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "librsvg2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank treeplus for reporting this issue."
        }
      ],
      "datePublic": "2026-01-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in GLib. An integer overflow vulnerability in its Unicode case conversion implementation can lead to memory corruption. By processing specially crafted and extremely large Unicode strings, an attacker could trigger an undersized memory allocation, resulting in out-of-bounds writes. This could cause applications utilizing GLib for string conversion to crash or become unstable."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-27T14:26:47.731Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-1489"
        },
        {
          "name": "RHBZ#2433348",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433348"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-01-27T13:59:19.539000+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-01-27T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Glib: glib: memory corruption via integer overflow in unicode case conversion",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "(CWE-190|CWE-787): Integer Overflow or Wraparound or Out-of-bounds Write"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-1489",
    "datePublished": "2026-01-27T14:26:47.731Z",
    "dateReserved": "2026-01-27T14:00:10.886Z",
    "dateUpdated": "2026-01-27T15:09:09.527Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-1485 (GCVE-0-2026-1485)

Vulnerability from cvelistv5 – Published: 2026-01-27 13:43 – Updated: 2026-01-27 14:42

Title

Glib: glib: local denial of service via buffer underflow in content type parsing

Summary

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability.

Severity ?

2.8 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

CWE

CWE-125 - Out-of-bounds Read

Assigner

redhat

References

URL

Tags

	https://access.redhat.com/security/cve/CVE-2026-1485	vdb-entryx_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=2433325	issue-trackingx_refsource_REDHAT

Impacted products

Vendor

Product

Version

Red Hat

Red Hat Enterprise Linux 10

cpe:/o:redhat:enterprise_linux:10

Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Credits

Red Hat would like to thank treeplus for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1485",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-27T14:39:59.509071Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-27T14:42:44.691Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "bootc",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "glycin-loaders",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "loupe",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "papers",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10"
          ],
          "defaultStatus": "affected",
          "packageName": "rpm-ostree",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "librsvg2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "bootc",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "glib2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "librsvg2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9"
          ],
          "defaultStatus": "affected",
          "packageName": "mingw-glib2",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank treeplus for reporting this issue."
        }
      ],
      "datePublic": "2026-01-27T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in Glib\u0027s content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Low"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 2.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-27T13:43:18.098Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-1485"
        },
        {
          "name": "RHBZ#2433325",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433325"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-01-27T12:55:34.373000+00:00",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-01-27T00:00:00+00:00",
          "value": "Made public."
        }
      ],
      "title": "Glib: glib: local denial of service via buffer underflow in content type parsing",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "(CWE-124|CWE-787|CWE-125): Buffer Underwrite (\u0027Buffer Underflow\u0027) or Out-of-bounds Write or Out-of-bounds Read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-1485",
    "datePublished": "2026-01-27T13:43:18.098Z",
    "dateReserved": "2026-01-27T12:56:50.801Z",
    "dateUpdated": "2026-01-27T14:42:44.691Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

SUSE-SU-2026:0355-1

CVE-2026-1484 (GCVE-0-2026-1484)

CVE-2026-1489 (GCVE-0-2026-1489)

CVE-2026-1485 (GCVE-0-2026-1485)

Tags

Sightings

Nomenclature