CVE-2026-1485: Glib: glib: local denial of service via buffer underflow in content type parsing
A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability.
Other sources
Buffer Underflow vulnerability in GLib’s content type parsing logic. The issue is caused by storing the length of a header line in a signed integer, allowing integer wraparound for extremely large inputs. This leads to pointer underflow and out-of-bounds memory access in parseheader(). Exploitation requires a user to install or process a maliciously crafted treemagic file, limiting the practical impact to local denial of service or application instability.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1485?
CVE-2026-1485 has a severity rating that indicates it can lead to a local denial of service.
How do I fix CVE-2026-1485?
To fix CVE-2026-1485, update to the latest version of the GLib library where the vulnerability has been addressed.
What causes the buffer underflow in CVE-2026-1485?
The buffer underflow in CVE-2026-1485 is caused by the way the length of a header line is stored in a signed integer, leading to potential integer wraparound.
Is CVE-2026-1485 easily exploitable?
CVE-2026-1485 is considered to be a local denial of service vulnerability, which typically requires local access to exploit.
Which software is affected by CVE-2026-1485?
CVE-2026-1485 affects the Gnome GLib library.