Description
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
Affected products
gnome: glib; redhat: openshift; redhat: enterprise linux
References10
- access.redhat.com/errata/RHSA-2026:15953
- access.redhat.com/errata/RHSA-2026:15969
- access.redhat.com/errata/RHSA-2026:15971
- access.redhat.com/errata/RHSA-2026:19148
- access.redhat.com/errata/RHSA-2026:19361
- access.redhat.com/errata/RHSA-2026:19452
- access.redhat.com/errata/RHSA-2026:19457
- access.redhat.com/errata/RHSA-2026:19459
- access.redhat.com/errata/RHSA-2026:19460
- access.redhat.com/errata/RHSA-2026:19523
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 1% percentile: 50 · as of 11 November 2026
- CWE
- CWE-190
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.