p PatchFirst

CVE-2026-1484

CVE-2026-1484 · Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.

CVSS 4.2 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 10

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 8

    No fix published

  • red hat enterprise linux 9

    No fix published

  • glib2.0 Debian:12

    Versions
    • 2.74.6-2
    • 2.74.6-2+deb12u1
    • 2.74.6-2+deb12u2
    • 2.74.6-2+deb12u3
    • 2.74.6-2+deb12u4
    • 2.74.6-2+deb12u5
    • 2.74.6-2+deb12u6
    • 2.74.6-2+deb12u7
    • 2.74.6-2+deb12u8
    Affected ranges
    • ECOSYSTEM: < 2.74.6-2+deb12u9

    Update to 2.74.6-2+deb12u9

  • glib2.0 Debian:13

    Versions
    • 2.84.3-1
    • 2.84.4-1
    • 2.84.4-2
    • 2.84.4-3~deb13u1
    • 2.84.4-3~deb13u2
    Affected ranges
    • ECOSYSTEM: < 2.84.4-3~deb13u3

    Update to 2.84.4-3~deb13u3

  • glib2.0 Debian:14

    Versions
    • 2.84.3-1
    • 2.84.4-1
    • 2.84.4-2
    • 2.84.4-3
    • 2.84.4-3~deb13u1
    • 2.84.4-3~deb13u2
    • 2.84.4-3~deb13u3
    • 2.84.4-3~deb13u4
    • 2.84.4-3~deb13u5
    • 2.85.1-1
    • 2.85.1-2
    • 2.85.2-2
    • 2.85.3-1
    • 2.85.4-1
    • 2.86.0-1
    • 2.86.0-2
    • 2.86.0-3
    • 2.86.0-4
    • 2.86.0-5
    • 2.86.0-6
    • 2.86.0-7
    • 2.86.1-1
    • 2.86.1-2
    • 2.86.2-1
    • 2.86.3-1
    • 2.86.3-2
    • 2.86.3-3
    • 2.86.3-4
    Affected ranges
    • ECOSYSTEM: < 2.86.3-5

    Update to 2.86.3-5

  • glib2.0 Ubuntu:Pro:14.04:LTS

    Versions
    • 2.38.0-1ubuntu1
    • 2.38.1-1
    • 2.39.1-0ubuntu1
    • 2.39.1-0ubuntu2
    • 2.39.1-0ubuntu3
    • 2.39.2-0ubuntu1
    • 2.39.2-0ubuntu2
    • 2.39.3-0ubuntu4
    • 2.39.4-0ubuntu1
    • 2.39.90-0ubuntu1
    • 2.39.91-0ubuntu2
    • 2.39.91-0ubuntu3
    • 2.39.92-2
    • 2.40.0-1
    • 2.40.0-1ubuntu1
    • 2.40.0-2
    • 2.40.2-0ubuntu1
    • 2.40.2-0ubuntu1.1
    • 2.40.2-0ubuntu1.1+esm1
    • 2.40.2-0ubuntu1.1+esm2
    • 2.40.2-0ubuntu1.1+esm3
    • 2.40.2-0ubuntu1.1+esm4
    • 2.40.2-0ubuntu1.1+esm6
    • 2.40.2-0ubuntu1.1+esm7
    • 2.40.2-0ubuntu1.1+esm8
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glib2.0 Ubuntu:Pro:16.04:LTS

    Versions
    • 2.46.1-1
    • 2.46.1-2
    • 2.47.1-1
    • 2.47.3-3
    • 2.47.4-1
    • 2.47.5-1
    • 2.47.6-1
    • 2.48.0-1ubuntu3
    • 2.48.0-1ubuntu4
    • 2.48.1-1~ubuntu16.04.1
    • 2.48.2-0ubuntu1
    • 2.48.2-0ubuntu3
    • 2.48.2-0ubuntu4
    • 2.48.2-0ubuntu4.1
    • 2.48.2-0ubuntu4.2
    • 2.48.2-0ubuntu4.3
    • 2.48.2-0ubuntu4.4
    • 2.48.2-0ubuntu4.5
    • 2.48.2-0ubuntu4.6
    • 2.48.2-0ubuntu4.7
    • 2.48.2-0ubuntu4.8
    • 2.48.2-0ubuntu4.8+esm1
    • 2.48.2-0ubuntu4.8+esm3
    • 2.48.2-0ubuntu4.8+esm4
    • 2.48.2-0ubuntu4.8+esm5
    • 2.48.2-0ubuntu4.8+esm6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glib2.0 Ubuntu:Pro:18.04:LTS

    Versions
    • 2.54.1-1ubuntu1
    • 2.55.2-2ubuntu1
    • 2.56.0-2ubuntu1
    • 2.56.0-4ubuntu1
    • 2.56.1-2ubuntu1
    • 2.56.2-0ubuntu0.18.04.1
    • 2.56.2-0ubuntu0.18.04.2
    • 2.56.3-0ubuntu0.18.04.1
    • 2.56.4-0ubuntu0.18.04.2
    • 2.56.4-0ubuntu0.18.04.3
    • 2.56.4-0ubuntu0.18.04.4
    • 2.56.4-0ubuntu0.18.04.5
    • 2.56.4-0ubuntu0.18.04.6
    • 2.56.4-0ubuntu0.18.04.7
    • 2.56.4-0ubuntu0.18.04.8
    • 2.56.4-0ubuntu0.18.04.9
    • 2.56.4-0ubuntu0.18.04.9+esm3
    • 2.56.4-0ubuntu0.18.04.9+esm4
    • 2.56.4-0ubuntu0.18.04.9+esm5
    • 2.56.4-0ubuntu0.18.04.9+esm6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glib2.0 Ubuntu:Pro:20.04:LTS

    Versions
    • 2.62.1-1
    • 2.63.1-2
    • 2.63.1-2ubuntu1
    • 2.63.3-1
    • 2.63.3-3
    • 2.63.5-2
    • 2.64.0-1
    • 2.64.1-1
    • 2.64.2-1~fakesync1
    • 2.64.3-1~ubuntu20.04.1
    • 2.64.6-1~ubuntu20.04.1
    • 2.64.6-1~ubuntu20.04.2
    • 2.64.6-1~ubuntu20.04.3
    • 2.64.6-1~ubuntu20.04.4
    • 2.64.6-1~ubuntu20.04.6
    • 2.64.6-1~ubuntu20.04.7
    • 2.64.6-1~ubuntu20.04.8
    • 2.64.6-1~ubuntu20.04.9
    • 2.64.6-1~ubuntu20.04.9+esm1
    • 2.64.6-1~ubuntu20.04.9+esm2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • glib2.0 Ubuntu:22.04:LTS

    Versions
    • 2.68.4-1ubuntu1
    • 2.70.1-1
    • 2.70.2-1
    • 2.71.0-2
    • 2.71.1-1
    • 2.71.2-1
    • 2.71.3-1
    • 2.72.0-1
    • 2.72.1-1
    • 2.72.4-0ubuntu1
    • 2.72.4-0ubuntu2
    • 2.72.4-0ubuntu2.2
    • 2.72.4-0ubuntu2.3
    • 2.72.4-0ubuntu2.4
    • 2.72.4-0ubuntu2.5
    • 2.72.4-0ubuntu2.6
    • 2.72.4-0ubuntu2.7
    • 2.72.4-0ubuntu2.8
    Affected ranges
    • ECOSYSTEM: < 2.72.4-0ubuntu2.9

    Update to 2.72.4-0ubuntu2.9

  • glib2.0 Ubuntu:24.04:LTS

    Versions
    • 2.78.0-2
    • 2.78.1-4
    • 2.78.3-1
    • 2.78.3-2
    • 2.79.1-1
    • 2.79.2-1~ubuntu1
    • 2.79.3-3ubuntu5
    • 2.80.0-6ubuntu1
    • 2.80.0-6ubuntu3
    • 2.80.0-6ubuntu3.1
    • 2.80.0-6ubuntu3.2
    • 2.80.0-6ubuntu3.4
    • 2.80.0-6ubuntu3.5
    • 2.80.0-6ubuntu3.6
    • 2.80.0-6ubuntu3.7
    Affected ranges
    • ECOSYSTEM: < 2.80.0-6ubuntu3.8

    Update to 2.80.0-6ubuntu3.8

  • glib2.0 Ubuntu:25.10

    Versions
    • 2.84.1-1
    • 2.84.1-2
    • 2.84.2-1
    • 2.84.3-1
    • 2.85.1-2
    • 2.85.2-2
    • 2.85.3-1
    • 2.86.0-2
    • 2.86.0-2ubuntu0.1
    • 2.86.0-2ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 2.86.0-2ubuntu0.3

    Update to 2.86.0-2ubuntu0.3

  • glib2.0 Ubuntu:26.04:LTS

    Versions
    • 2.86.0-2
    • 2.86.1-1
    • 2.86.1-2
    • 2.86.2-1
    • 2.86.3-1
    • 2.86.3-4
    Affected ranges
    • ECOSYSTEM: < 2.87.2-2

    Update to 2.87.2-2

Original sources

Check your server →