GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in gmarkupparsecontextparse() in gmarkup.c, related to utf8_str().
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-16429.json"