PT-2026-80491 · Julia · Glib Jll

Published

2026-08-11

·

Updated

2026-08-11

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
A flaw was found in GLib. A state confusion issue exists in g dbus node info new for xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a node element nested within other elements like method, signal, property or arg. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

JLSEC-2026-1249

Affected Products

Glib Jll