CVE-2018-16428
glib2: NULL pointer dereference in g_markup_parse_context_end_parse() function in gmarkup.c
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · September 4, 2018
Updated · November 22, 2025
Description
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Since the only affected code in this flaw is g_markup_parse_context_end_parse(), any application (compiled with glib2) which does not use this function or any other function which calls this vulnerable code, is not affected by this flaw.
CVSS / CWE
CVSS 3.0 · 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer