Description

A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).

INFO

Published Date :

2026-01-21T11:38:39.370Z

Last Modified :

2026-03-19T09:46:18.865Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2026-0988 vulnerability.

Vendors Products
Redhat
  • Enterprise Linux
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-0988.

URL Resource
https://access.redhat.com/security/cve/CVE-2026-0988 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2429886 cve-icon cve-icon
https://gitlab.gnome.org/GNOME/glib/-/issues/3851 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-0988 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-0988 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact