JLSEC-2026-455

See a problem?
Please try reporting it to the source first.
Source
https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-455.md
Import Source
https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-455.json
JSON Data
https://api.osv.dev/v1/vulns/JLSEC-2026-455
Upstream
  • EUVD-2019-1980
  • GHSA-wwvc-98fq-c42m
Published
2026-05-07T14:27:30.173Z
Modified
2026-05-07T14:47:28.772394377Z
Summary
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer...
Details

Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pangolog2visgetembeddinglevels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.

Database specific 
{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "id": "CVE-2019-1010238",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010238",
            "published": "2019-07-19T17:15:11.690Z",
            "modified": "2024-11-21T04:18:04.830Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2019-1010238",
            "imported": "2026-05-07T14:09:13.761Z",
            "database_specific": {
                "status": "Modified"
            }
        },
        {
            "id": "GHSA-wwvc-98fq-c42m",
            "html_url": "https://github.com/advisories/GHSA-wwvc-98fq-c42m",
            "imported": "2026-05-07T14:09:17.640Z",
            "modified": "2024-04-04T01:18:58Z",
            "published": "2022-05-24T16:50:42Z",
            "url": "https://api.github.com/advisories/GHSA-wwvc-98fq-c42m"
        },
        {
            "id": "EUVD-2019-1980",
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1980",
            "imported": "2026-05-07T14:09:16.121Z",
            "modified": "2024-08-05T03:07:18Z",
            "published": "2019-07-19T16:42:41Z",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2019-1980"
        }
    ]
}
References

Affected packages

Julia / Pango_jll

Package

Name
Pango_jll
Purl
pkg:julia/Pango_jll?uuid=36c8627f-9965-5494-a995-c6b170f724f3

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.47.0+0

Database specific

source 
"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-455.json"