Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• gnome glibbefore 2.88.1
• redhat enterprise linux10.0
• redhat enterprise linux6.0
• redhat enterprise linux7.0
• redhat enterprise linux8.0
• redhat enterprise linux9.0

Versions reported by the vendor

Affected version ranges reported by the assigning authority (redhat). Independent of NVD's CPE analysis and usually ahead of it.

• GNOME GLib

  • before 2.88.1affected · semver

• Red Hat Cert Manager support for Red Hat OpenShift release 1.19

  • 1788348522 and laternot affected · rpm
  • 1788348571 and laternot affected · rpm
  • 1788348571 and laternot affected · rpm
  • 1788348594 and laternot affected · rpm

• Red Hat Cert Manager support for Red Hat OpenShift release 1.20

  • 1790223279 and laternot affected · rpm
  • 1790223719 and laternot affected · rpm
  • 1790272426 and laternot affected · rpm
  • 1790589998 and laternot affected · rpm
  • 1790589912 and laternot affected · rpm
  • 1790589914 and laternot affected · rpm
  • 1790589855 and laternot affected · rpm
  • 1790598593 and laternot affected · rpm

• Red Hat Red Hat AI Inference Server 3.2

  • 1790621714 and laternot affected · rpm
  • 1790621718 and laternot affected · rpm
  • 1790621713 and laternot affected · rpm

• Red Hat Red Hat Discovery 2

  • 1788205779 and laternot affected · rpm
  • 1788206196 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 10

  • 0:2.80.4-12.el10_2.21 and laternot affected · rpm
  • all versionsaffected

• Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

  • 0:2.80.4-4.el10_0.17 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 6

  • all versionsaffected

• Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

  • 0:2.56.1-13.el7_9.1 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8

  • 0:2.70.1-9.el8_10 and laternot affected · rpm
  • 0:2.56.4-177.el8_10 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

  • 0:2.56.4-10.el8_4.7 and laternot affected · rpm

• Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

  • 0:2.56.4-10.el8_4.7 and laternot affected · rpm

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2019-12450file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is
  40Plan
• CVE-2018-16428In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
  40Plan
• CVE-2025-14087Glib: glib: buffer underflow in gvariant parser leads to heap corruption
  39Monitor
• CVE-2024-52533gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not suf
  39Monitor
• CVE-2026-58016Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
  36Monitor
• CVE-2026-58014Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
  34Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.