In GNOME GLib 2.56.1, gmarkupparsecontextend_parse() in gmarkup.c has a NULL pointer dereference.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "12.04"
}
],
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "14.04"
}
],
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "16.04"
}
],
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "18.04"
}
],
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"
}
]
}{
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "2.56.1"
}
],
"cpe": "cpe:2.3:a:gnome:glib:2.56.1:*:*:*:*:*:*:*"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-16428.json"
[
{
"source": "https://gitlab.gnome.org/gnome/glib@fccef3cc822af74699cca84cd202719ae61ca3b9",
"id": "CVE-2018-16428-b917d5c8",
"digest": {
"threshold": 0.9,
"line_hashes": [
"27967146418341091245337691577480173759",
"71132367559488922544869764440102681458",
"198859563808106364930921395270440707469",
"96452346924312047733840760789155889613",
"296685038050425211123999464966957840432",
"286859789758931844681193954555906907404"
]
},
"target": {
"file": "glib/gmarkup.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"source": "https://gitlab.gnome.org/gnome/glib@fccef3cc822af74699cca84cd202719ae61ca3b9",
"id": "CVE-2018-16428-f56c3b10",
"digest": {
"length": 3192.0,
"function_hash": "78154215784110994088640107664106133672"
},
"target": {
"file": "glib/gmarkup.c",
"function": "g_markup_parse_context_end_parse"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
}
]
"2026-05-13T12:01:59Z"