Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Summary

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

Timeline

1. Dec 10, 2025, 9:01 AM UTCCVE published
2. Dec 10, 2025, 2:46 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Oct 14, 2026, 7:23 PM UTCRecord last updated

Affected versions

• glib

  fixed in 2.86.3

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• mingw-glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• glib2

  Version range not reported

• cert-manager/jetstack-cert-manager-acmesolver-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-bundle

  Version range not reported

• cert-manager/jetstack-cert-manager-acmesolver-rhel9

  Version range not reported

• cert-manager/jetstack-cert-manager-rhel9

  Version range not reported

• cert-manager/cert-manager-istio-csr-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-rhel9

  Version range not reported

• cert-manager/cert-manager-operator-bundle

  Version range not reported

• cert-manager/cert-manager-trust-manager-rhel9

  Version range not reported

• rhaiis/model-opt-cuda-rhel9

  Version range not reported

• discovery/discovery-server-rhel9

  Version range not reported

• discovery/discovery-ui-rhel9

  Version range not reported

• glib2-main

  Version range not reported

• insights-proxy/insights-proxy-container-rhel9

  Version range not reported

• rhai/base-image-neuron-rhel9

  Version range not reported

• rhui5/cds-rhel9

  Version range not reported

• rhui5/haproxy-rhel9

  Version range not reported

• rhui5/installer-rhel9

  Version range not reported

• rhui5/rhua-rhel9

  Version range not reported

• rhui5/cds-kubernetes-tp-rhel9

  Version range not reported

• rhui5/installer-tp-rhel9

  Version range not reported

• rhui5/rhua-tp-rhel9

  Version range not reported

• bootc

  Version range not reported

• glycin-loaders

  Version range not reported

• loupe

  Version range not reported

• mingw-glib2

  Version range not reported

• papers

  Version range not reported

• rpm-ostree

  Version range not reported

• glib2

  Version range not reported

• librsvg2

  Version range not reported

• bootc

  Version range not reported

• librsvg2

  Version range not reported

• mingw-glib2

  Version range not reported

• openshift4/ose-hypershift-rhel9

  Version range not reported

References 25