Allocation of Resources Without Limits or Throttling The advisory has been revoked - it doesn't affect any version of package mingw32-glib2-static (opens in a new tab)

Threat Intelligence

0.58% (48^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL10-MINGW32GLIB2STATIC-18032057
published21 Jul 2026
disclosed12 Jul 2026

Report a new vulnerability Found a mistake?

Introduced: 12 Jul 2026

CVE-2026-15588 (opens in a new tab) CWE-770 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mingw32-glib2-static package and not the mingw32-glib2-static package as distributed by RHEL.

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.