This vulnerability arises from improper validation of input parameters in the g_buffered_input_stream_peek() function within the glib2 library used by Red Hat Hardened Images. Specifically, the offset and count parameters are not validated, allowing an integer overflow during length calculation. When exploited with specially crafted values, this overflow causes memcpy() to receive an incorrect size argument, triggering a buffer overflow. The primary impact is application crashes leading to denial of service conditions. The CVSS v3.1 base score is 3.7 (low severity) with network attack vector, high attack complexity, no privileges required, no user interaction, and impact limited to availability.

The vulnerability can cause application crashes resulting in denial of service (DoS). There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are reported in the wild. The severity is rated low due to the high attack complexity and limited impact scope.

Red Hat has published updated glib2 RPM packages (version 2.88.0-1.1.hum1) for affected architectures (aarch64, x86_64) that address this vulnerability. Users of Red Hat Hardened Images should apply these updates as provided in the advisory RHSA-2026:7461. Patch status is confirmed by the vendor advisory. No additional mitigation actions are required beyond applying the official update.