REDHAT-BUG-2433259: Integer Overflow

Published Jan 27, 2026
·
Updated

Integer Overflow leads to Buffer Underflow vulnerability in GLib’s Base64 encoding implementation. The flaw is caused by storing the output length returned by gbase64encodestep() in a signed integer (gint). When encoding very large attacker-controlled input, this value may overflow and become negative. The resulting pointer arithmetic in gbase64encodeclose() leads to a buffer underflow and out-of-bounds heap write. Exploitation requires that an application passes untrusted or excessively large input to the Base64 encoding API and may result in application crashes or potential memory corruption.

Affected Software

1 affected component
Gnome GLib

Event History

Jan 27, 2026
Data Sourced
via Red Hat·12:19 PM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2433259?

The severity of REDHAT-BUG-2433259 is considered high due to the potential for exploitation leading to buffer underflow and application crashes.

2

How do I fix REDHAT-BUG-2433259?

To fix REDHAT-BUG-2433259, update to the latest version of GNOME GLib where the vulnerability has been patched.

3

What software is affected by REDHAT-BUG-2433259?

REDHAT-BUG-2433259 affects GNOME GLib versions that utilize its Base64 encoding functionality.

4

What type of vulnerability is REDHAT-BUG-2433259?

REDHAT-BUG-2433259 is classified as an integer overflow vulnerability leading to buffer underflow.

5

What can an attacker do with REDHAT-BUG-2433259?

An attacker can exploit REDHAT-BUG-2433259 to potentially execute arbitrary code or cause denial of service through crafted input.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203