PT-2026-61546 · Glib · Glib

CVE-2026-15588 · Published 2026-07-20 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions GLib (affected versions not specified)

Description A denial-of-service and resource exhaustion issue exists in the GDBus component of GLib. The gdbusauth authentication mechanism does not enforce proper length limits on data lines received from a client. An unauthenticated local or remote attacker can send excessively long data streams, causing the application to consume excessive system memory and CPU, which may result in a system hang or crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-15588

Affected Products

Glib

References · 5

• 🔥 https://gitlab.gnome.org/GNOME/glib/-/issues/3985 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15588 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2499675 · Note
• https://access.redhat.com/security/cve/CVE-2026-15588 · Note
• https://twitter.com/VulmonFeeds/status/2079281470602924514 · Twitter Post