CVE-2018-16429

Name of the Vulnerable Software and Affected Versions GNOME GLib version 2.56.1

Description The issue is related to an out-of-bounds read in the g markup parse context parse() function, specifically in the utf8 str() method within gmarkup.c. This could potentially allow a remote attacker to cause a denial of service.

Recommendations For GNOME GLib version 2.56.1, consider restricting the use of the g markup parse context parse() function until a patch is available. As a temporary workaround, avoid using the utf8 str() method in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.