Out-of-bounds Write Affecting glib package, versions [,2.87.3)


Severity

Recommended
0.0
medium
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.31% (24th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-GLIB-15126603
  • published29 Jan 2026
  • disclosed27 Jan 2026
  • creditUnknown

Introduced: 27 Jan 2026

CVE-2026-1484  (opens in a new tab)
CWE-124  (opens in a new tab)
CWE-190  (opens in a new tab)
CWE-787  (opens in a new tab)

How to fix?

Upgrade glib to version 2.87.3 or higher.

Overview

Affected versions of this package are vulnerable to Out-of-bounds Write via the g_base64_encode_close function. An attacker can cause memory corruption or application crashes by providing excessively large or untrusted input data.

CVSS Base Scores

version 4.0
version 3.1