PT-2026-4919 · Gnome+2 · Glib+2

Treeplus · Published 2026-01-01 · Updated 2026-03-20 · CVE-2026-1489

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions GLib (affected versions not specified)

Description A flaw exists in GLib related to its Unicode case conversion implementation. An integer overflow can lead to memory corruption when processing specially crafted, large Unicode strings. This overflow can cause an undersized memory allocation, resulting in out-of-bounds writes, potentially leading to application crashes or instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

AZL-76469

AZL-76545

BDU:2026-05067

CVE-2026-1489

ECHO-6AF9-FC0C-2334

OESA-2026-1683

OPENSUSE-SU-2026:10111-1

OPENSUSE-SU-2026:20150-1

SUSE-SU-2026:0355-1

SUSE-SU-2026:0372-1

SUSE-SU-2026:0373-1

SUSE-SU-2026:20210-1

SUSE-SU-2026:20221-1

SUSE-SU-2026:20446-1

SUSE-SU-2026:20493-1

USN-8017-1

Affected Products

Glib

Linuxmint

Ubuntu

References · 57

• https://ubuntu.com/security/CVE-2026-1485 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-1489 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05067 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20150-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20446-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1683 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-1489 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20493-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-76469 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-1489 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-1489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-1489 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-76545 · Vendor Advisory