CVE-2026-1484

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 48/100
Published: 2026-01-27 Modified: 2026-11-06 First seen: 2026-11-05 Status: active

Attack Surface

Network No Auth

CVSS Vector Breakdown

AV: Network
AC: High
PR: None
UI: Required
S: Unchanged
C: None
I: Low
A: Low

Description

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrusted or extremely large Base64 input using GLib may crash or behave unpredictably.

Weakness Classification (1)

Bug Bounty Relevance

48 / 100
✓ Network accessible
✓ No authentication

CVSS Score

4.2 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS — Exploitation Probability

0.34%
Raw Score 0.003410
Percentile 28.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00341
2026-11-13
0.00341
2026-11-12
0.00341
2026-11-10
0.00341
2026-11-09
0.00341
2026-11-08
0.00341
2026-11-07
0.00341
2026-11-06
0.00341
2026-11-05
0.00341

Intelligence Sources

mitre ref →
nvd ref →