{"action":"Upgrade glib2.0 to 2.84.4-3~deb13u5 or later.","affected":[{"fixed":"2.84.4-3~deb13u5","introduced":"0"}],"component":"glib2.0","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["2.84.4-3~deb13u5"],"id":"tcs_01M5NQPH932EHSSNETCRQXPNQD","modified_at":"2026-10-15T09:47:31.241832185Z","published_at":"2026-07-17T20:17:16.167Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-16118","https://security-tracker.debian.org/tracker/CVE-2026-16118"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-16118#Debian:13/glib2.0","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-16118"}],"summary":"A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME ma"}