Поиск уязвимостей
Количество 20
Количество 20
ALT-PU-2025-12627
ALT-PU-2025-12627: package `glib2` update to version 2.84.4-alt1
CVE-2025-6052
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
CVE-2025-6052
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
CVE-2025-6052
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
CVE-2025-6052
Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
CVE-2025-6052
A flaw was found in how GLib\u2019s GString manages memory when adding ...
CVE-2025-7039
A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.
CVE-2025-7039
A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.
CVE-2025-7039
A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.
CVE-2025-7039
Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()
CVE-2025-7039
A flaw was found in glib. An integer overflow during temporary file cr ...
GHSA-99rj-3595-5frj
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
BDU:2025-12471
Уязвимость набора библиотек GLib, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:4308-1
Security update for glib2
SUSE-SU-2025:4278-1
Security update for glib2
GHSA-wcxv-32f4-xr5v
A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.
BDU:2026-05134
Уязвимость набора библиотек GLib, связанная с неверным ограничением имени пути к каталогу, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
SUSE-SU-2025:02167-1
Security update for glib2
ROS-20251111-06
Уязвимость glib2
openSUSE-SU-2026:20018-1
Security update for glib2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
ALT-PU-2025-12627 ALT-PU-2025-12627: package `glib2` update to version 2.84.4-alt1 | CVSS3: 7.5 | около 1 года назад | ||
CVE-2025-6052 A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад | |
CVE-2025-6052 A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption. | CVSS3: 3.7 | 1% Низкий | больше 1 года назад | |
CVE-2025-6052 A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад | |
CVE-2025-6052 Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring | CVSS3: 3.7 | 1% Низкий | около 1 года назад | |
CVE-2025-6052 A flaw was found in how GLib\u2019s GString manages memory when adding ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад | |
CVE-2025-7039 A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations. | CVSS3: 3.7 | 0% Низкий | около 1 года назад | |
CVE-2025-7039 A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations. | CVSS3: 3.7 | 0% Низкий | больше 1 года назад | |
CVE-2025-7039 A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations. | CVSS3: 3.7 | 0% Низкий | около 1 года назад | |
CVE-2025-7039 Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file() | CVSS3: 3.7 | 0% Низкий | около 1 года назад | |
CVE-2025-7039 A flaw was found in glib. An integer overflow during temporary file cr ... | CVSS3: 3.7 | 0% Низкий | около 1 года назад | |
GHSA-99rj-3595-5frj A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption. | CVSS3: 3.7 | 1% Низкий | больше 1 года назад | |
BDU:2025-12471 Уязвимость набора библиотек GLib, связанная с целочисленным переполнением, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 3.7 | 1% Низкий | больше 1 года назад | |
SUSE-SU-2025:4308-1 Security update for glib2 | 0% Низкий | 12 месяцев назад | ||
SUSE-SU-2025:4278-1 Security update for glib2 | 0% Низкий | 12 месяцев назад | ||
GHSA-wcxv-32f4-xr5v A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations. | CVSS3: 3.7 | 0% Низкий | 5 месяцев назад | |
BDU:2026-05134 Уязвимость набора библиотек GLib, связанная с неверным ограничением имени пути к каталогу, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 3.7 | 0% Низкий | 10 месяцев назад | |
SUSE-SU-2025:02167-1 Security update for glib2 | больше 1 года назад | |||
ROS-20251111-06 Уязвимость glib2 | CVSS3: 3.7 | 0% Низкий | 12 месяцев назад | |
openSUSE-SU-2026:20018-1 Security update for glib2 | 10 месяцев назад |
Уязвимостей на страницу