{"schemaVersion":3,"id":"USN-8017-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"glib2.0 vulnerabilities\n\nIt was discovered that GLib incorrectly parsed large Base64 data. An\nattacker could use this issue to cause GLib to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2026-1484)\n\nIt was discovered that GLib incorrectly parsed certain treemagic files.\nAn attacker could use this issue to cause GLib to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2026-1485)\n\nIt was discovered that GLib incorrectly handled Unicode case conversion.\nAn attacker could use this issue to cause GLib to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2026-1489)","dates":{"published":"2026-02-05T13:12:58.000Z","modified":"2026-04-27T18:36:07.161Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"glib2.0","name":"glib2.0","label":"glib2.0","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/glib2.0","purlType":"deb","versions":[{"text":"< 2.72.4-0ubuntu2.9","noFixRecorded":false,"fixedIn":null},{"text":"< 2.80.0-6ubuntu3.8","noFixRecorded":false,"fixedIn":null},{"text":"< 2.86.0-2ubuntu0.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.72.4-0ubuntu2.9 | < 2.80.0-6ubuntu3.8 | < 2.86.0-2ubuntu0.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8017-1","label":"ubuntu.com/security/notices/USN-8017-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-1484","label":"ubuntu.com/security/CVE-2026-1484","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-1485","label":"ubuntu.com/security/CVE-2026-1485","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-1489","label":"ubuntu.com/security/CVE-2026-1489","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2026-1484","CVE-2026-1485","CVE-2026-1489"],"downstream":[],"duplicates":[],"related":["CVE-2026-1484","CVE-2026-1485","CVE-2026-1489"]},"timeline":[{"kind":"published","date":"2026-02-05T13:12:58.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T18:36:07.161Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:49:40.399Z","stale":false,"partial":false}}