What is the CVSS score of CVE-2026-58010?

CVE-2026-58010 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H. EPSS exploitation probability: 0.3%.

Which versions of GLib are affected by CVE-2026-58010?

GNOME GLib contains a vulnerability allowing attackers to extract memory contents and disable critical applications across the enterprise by exploiting untrusted data handling.. A patch is available.

How to fix or mitigate CVE-2026-58010?

Within 24 hours: Inventory GLib versions across all Linux systems and identify business-critical applications dependent on affected versions. Within 7 days: Deploy vendor patches across development, staging, and production environments. Within 30 days: Verify patch deployment and implement monitoring for exploitation attempts.

GLib CVE-2026-58010

EUVD-2026-40312 HIGH

Buffer Over-read (CWE-126)

2026-06-30 secalert@redhat.com

GHSA-m7rp-473c-296x

Buffer Overflow Denial Of Service Information Disclosure Enterprise Linux Glib

8.2

CVSS 3.1 · NVD

Severity by source

Vendor (redhat) PRIMARY

MEDIUM

qualitative

NVD

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

vuln.today AI

8.2 HIGH

Untrusted GVariant/D-Bus input is remotely reachable without auth or interaction (AV:N/AC:L/PR:N/UI:N); one-byte over-read gives C:L, no integrity impact, and a page-boundary crash yields A:H.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (redhat).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Updated

Jul 02, 2026 - 19:30 vuln.today

v3 (cvss_changed)

Analysis Updated

Jul 02, 2026 - 19:29 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 02, 2026 - 19:22 vuln.today

cvss_changed

Severity Changed

Jul 02, 2026 - 19:22 NVD

MEDIUM HIGH

CVSS changed

Jul 02, 2026 - 19:22 NVD

6.5 (MEDIUM) 8.2 (HIGH)

Patch available

Jun 30, 2026 - 16:01 EUVD

Analysis Generated

Jun 30, 2026 - 13:35 vuln.today

DescriptionNVD

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.

AnalysisAI

Out-of-bounds read in GNOME GLib's GVariant serialiser allows remote attackers to leak a single byte of adjacent memory and to crash applications that deserialise untrusted GVariant data. The flaw sits in gvs_tuple_is_normal() in glib/gvariant-serialiser.c, where an alignment-padding bounds check uses '>' instead of '>=', reading one byte past the buffer; when that byte falls across a page boundary the process faults, producing a denial of service. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Reach GVariant-parsing service (e.g. D-Bus)

Delivery

Send crafted tuple with malformed padding

Exploit

Trigger off-by-one over-read in gvs_tuple_is_normal

Execution

Leak adjacent byte or fault on page boundary

Impact

Information disclosure or process crash (DoS)

Access

Reach GVariant-parsing service (e.g. D-Bus)

Delivery

Send crafted tuple with malformed padding

Exploit

Trigger off-by-one over-read in gvs_tuple_is_normal

Execution

Leak adjacent byte or fault on page boundary

Impact

Information disclosure or process crash (DoS)

Vulnerability AssessmentAI

Exploitation	Exploitation requires that a vulnerable GLib version (below 2.88.1 / 2.86.5) deserialises attacker-controlled GVariant data - most realistically via a D-Bus service, GSettings input, or any application that parses externally-sourced GVariant tuples through gvs_tuple_is_normal(). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Signals are moderate and partially conflicting. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker sends a crafted GVariant-serialised message (for example over a D-Bus interface or another IPC path that deserialises untrusted GVariant data) whose tuple padding is sized to trigger the off-by-one read in gvs_tuple_is_normal(). The over-read leaks one adjacent byte back to the attacker or, if the byte lies on an unmapped page, crashes the consuming process, denying service. …
Remediation	Vendor-released patch: upgrade GLib to 2.88.1 (or 2.86.5 on the 2.86 maintenance branch) or later, per the ENISA EUVD fixed-version data; on Red Hat Enterprise Linux apply the distribution glib2 update tracked at https://access.redhat.com/security/cve/CVE-2026-58010 and Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=2492243, with upstream detail at https://gitlab.gnome.org/GNOME/glib/-/issues/3915. … Detailed patch versions, workarounds, and compensating controls in full report.