CVE-2026-0988 Glib: glib: denial of service via integer overflow in g_buffered_input_stream_peek()
An integer overflow in Glib's buffered input stream allows attackers to cause application crashes via crafted input, resulting in denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-0988?
CVE-2026-0988 is a low-severity vulnerability in Red Hat Enterprise Linux 10, published on 21 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in glib. Missing validation of offset and count parameters in the g_buffered_input_stream_peek() function can lead to an integer overflow during length calculation. When specially crafted values are provided, this overflow results in an incorrect size being passed to memcpy(), triggering a buffer overflow. This can cause application crashes, leading to a Denial of Service (DoS).
Weakness: CWE-190
Which versions are affected by CVE-2026-0988?
Linux distribution packages (17)
glib2 SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise Micro 5.2 | All versions | 2.62.6-150200.3.39.1 |
glib2 SUSE:Linux Enterprise Micro 5.3 | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise Micro 5.4 | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise Micro 5.5 | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise Module for Basesystem 15 SP7 | All versions | 2.78.6-150600.4.28.1 |
glib2 SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 2.48.2-12.55.1 |
glib2 SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 2.70.5-150400.3.34.1 |
glib2 SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 2.70.5-150400.3.34.1 |
glib2 openSUSE:Leap 15.6 | All versions | 2.78.6-150600.4.28.1 |
glib2-doc openSUSE:Leap 15.6 | All versions | 2.78.6-150600.4.28.1 |
glib2 openSUSE:Tumbleweed | All versions | 2.86.3-2.1 |
How do I fix CVE-2026-0988?
Apply the vendor's patch.
Is CVE-2026-0988 being exploited?
There is no known exploitation of CVE-2026-0988 in the wild and no public exploit code.
Sources
Also known as AZL-75017, AZL-75020, BELL-CVE-2026-0988, DEBIAN-CVE-2026-0988, ECHO-28c4-b486-37b4, GHSA-m2x7-c9gp-xc46 and 10 more.