Search/CVE-2026-1485
● CVE — Low

CVE-2026-1485

DiscoveredJan 27, 2026UpdatedApr 15, 2026

A flaw was found in Glib's content type parsing logic. This buffer underflow vulnerability occurs because the length of a header line is stored in a signed integer, which can lead to integer wraparound for very large inputs. This results in pointer underflow and out-of-bounds memory access. Exploitation requires a local user to install or process a specially crafted treemagic file, which can lead to local denial of service or application instability.

CVSS v3.1
2.8 LOW
EPSS
0.16%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
1
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 24, 2026
▲ 0.02pp
0.14% → 0.16% over 5 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityLOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Connections
2 relationships
Timeline
disclosure → media coverage
Jan 27, 2026
Disclosure — published as a CVE record. · last revised by NVD Apr 15, 2026
Feb 5, 2026
ubuntu.com reports: USN-8017-1: GLib vulnerabilities