Log in Start free

Vulnerability · Published Jan 21, 2026 · Assigned by redhat

CVE-2026-0988Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()

Low 3.7

In plain English

A low-severity integer overflow in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)0.4%top 62.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12glib2.02.74.6-2+deb12u9DEBIAN-CVE-2026-0988
Debian:13glib2.02.84.4-3~deb13u3DEBIAN-CVE-2026-0988
Debian:14glib2.02.86.3-5DEBIAN-CVE-2026-0988
Ubuntu:22.04:LTSglib2.02.72.4-0ubuntu2.8USN-7971-1
Ubuntu:22.04:LTSglib2.02.72.4-0ubuntu2.8UBUNTU-CVE-2026-0988
Ubuntu:24.04:LTSglib2.02.80.0-6ubuntu3.7USN-7971-1
Ubuntu:24.04:LTSglib2.02.80.0-6ubuntu3.7UBUNTU-CVE-2026-0988
Ubuntu:25.10glib2.02.86.0-2ubuntu0.2UBUNTU-CVE-2026-0988
Ubuntu:25.10glib2.02.86.0-2ubuntu0.2USN-7971-1
Ubuntu:26.04:LTSglib2.02.87.2-2UBUNTU-CVE-2026-0988

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References