Debian 11 GLib2.0 DLA-4491-1 Multiple DoS Memory Issues CVE-2026-0988

CVE-2026-0988

Codean Labs found missing validation of offset and count parameters in the
g_buffered_input_stream_peek() function can lead to an integer overflow
during length calculation. When specially crafted values are provided, this
overflow results in an incorrect size being passed to memcpy(), triggering
a buffer overflow. This can cause application crashes, leading to a Denial
of Service (DoS).

CVE-2026-1484

treeplus with additional thanks to Sovereign Tech Resilience program of the
Sovereign Tech Agency found in the GLib Base64 encoding routine when
processing very large input data. Due to incorrect use of integer types
during length calculation, the library may miscalculate buffer boundaries.
This can cause memory writes outside the allocated buffer. Applications
that process untrusted or extremely large Base64 input using GLib may crash
or behave unpredictably.

CVE-2026-1485