Log in Start free

Vulnerability · Published Jan 27, 2026 · Assigned by redhat

CVE-2026-1484Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()

Medium 4.2

In plain English

A medium-severity out-of-bounds write in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.2Medium
Exploit odds (30 days)0.3%top 72.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12glib2.02.74.6-2+deb12u9DEBIAN-CVE-2026-1484
Debian:13glib2.02.84.4-3~deb13u3DEBIAN-CVE-2026-1484
Debian:14glib2.02.86.3-5DEBIAN-CVE-2026-1484
Ubuntu:22.04:LTSglib2.02.72.4-0ubuntu2.9USN-8017-1
Ubuntu:22.04:LTSglib2.02.72.4-0ubuntu2.9UBUNTU-CVE-2026-1484
Ubuntu:24.04:LTSglib2.02.80.0-6ubuntu3.8USN-8017-1
Ubuntu:24.04:LTSglib2.02.80.0-6ubuntu3.8UBUNTU-CVE-2026-1484
Ubuntu:25.10glib2.02.86.0-2ubuntu0.3UBUNTU-CVE-2026-1484
Ubuntu:25.10glib2.02.86.0-2ubuntu0.3USN-8017-1
Ubuntu:26.04:LTSglib2.02.87.2-2UBUNTU-CVE-2026-1484

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

References