Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m2x7-c9gp-xc46

Опубликовано: 21 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

EPSS

Процентиль: 16%
0.00051
Низкий

3.7 Low

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 3.7
ubuntu
18 дней назад

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

CVSS3: 3.7
nvd
18 дней назад

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

CVSS3: 3.7
debian
18 дней назад

A flaw was found in glib. Missing validation of offset and count param ...

suse-cvrf
15 дней назад

Security update for glib2

suse-cvrf
16 дней назад

Security update for glib2

EPSS

Процентиль: 16%
0.00051
Низкий

3.7 Low

CVSS3

Дефекты

CWE-190