Skip to main content

GLib CVE-2026-58013

| EUVDEUVD-2026-40315 HIGH
Buffer Over-read (CWE-126)
2026-06-30 secalert@redhat.com GHSA-4x46-h598-64qr
Denial Of Service Buffer Overflow Information Disclosure Glib Enterprise Linux
8.2
CVSS 3.1 · NVD
Share

Severity by source

Vendor (redhat) PRIMARY
MEDIUM
qualitative
NVD
8.2 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
vuln.today AI
6.5 MEDIUM

Attacker-reachable data yields AV:N and PR:N/UI:N, but the required non-default multi-byte line terminator plus page-boundary dependency justify AC:H; impact is 7-byte read (C:L) and crash (A:H), no integrity loss.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
4.4 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Red Hat
6.5 MEDIUM
qualitative

Primary rating from Vendor (redhat).

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
High

Lifecycle Timeline

7
Analysis Updated
Jul 02, 2026 - 19:44 vuln.today
v3 (cvss_changed)
Analysis Updated
Jul 02, 2026 - 19:44 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jul 02, 2026 - 19:37 vuln.today
cvss_changed
Severity Changed
Jul 02, 2026 - 19:37 NVD
MEDIUM HIGH
CVSS changed
Jul 02, 2026 - 19:37 NVD
6.5 (MEDIUM) 8.2 (HIGH)
Patch available
Jun 30, 2026 - 16:01 EUVD
Analysis Generated
Jun 30, 2026 - 13:36 vuln.today

DescriptionNVD

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

AnalysisAI

Buffer over-read in GLib's giochannel line-reading code (g_io_channel_read_line_backend) affects the GNOME GLib library prior to version 2.88.1, where an application that configures a multi-byte custom line terminator triggers memcmp to read past the end of the internal GString buffer. Depending on memory layout, this leaks up to 7 bytes of adjacent heap memory (minor information disclosure) or crashes the process when the over-read crosses an unmapped page boundary (denial of service). There is no public exploit identified at time of analysis, EPSS is low (0.27%), and CISA SSVC rates exploitation as none.

Technical ContextAI

GLib is the low-level C utility library underpinning GNOME and a vast range of Linux desktop and server software, providing core data structures and I/O primitives. The defect is CWE-126 (Buffer Over-read) in the GIOChannel subsystem: g_io_channel_read_line_backend() in giochannel.c uses memcmp to compare buffered input against a caller-supplied line terminator string (set via g_io_channel_set_line_term). When that terminator is longer than one byte, the comparison logic can advance the comparison window past the bytes actually present in the backing GString, causing memcmp to dereference memory beyond the allocation. Per the EUVD/CPE data the affected component is gnome:glib in all versions below 2.88.1, and Red Hat maps the exposure across Red Hat Enterprise Linux 6, 7, 8, 9, and 10 where GLib is a base dependency.

RemediationAI

Upgrade GLib to version 2.88.1 or later, which contains the upstream fix (patch available per vendor advisory; EUVD lists 2.88.1 as the fixed baseline). On Red Hat Enterprise Linux 6/7/8/9/10, apply the GLib package update tracked in the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58013 and Bugzilla https://bugzilla.redhat.com/show_bug.cgi?id=2492248; upstream details are in https://gitlab.gnome.org/GNOME/glib/-/issues/3925. Where immediate patching is not possible, the practical compensating control is application-level: avoid configuring multi-byte custom line terminators via g_io_channel_set_line_term() on GIOChannels that read untrusted or network-sourced data, and where feasible revert affected code paths to the default single-byte newline handling - the trade-off is that applications specifically relying on a multi-character delimiter would need alternative parsing. Because the impact is limited to a 7-byte read or a crash, restricting exposure of any service that both uses this feature and processes attacker-controlled input (network segmentation, input size/rate limiting) is a reasonable stopgap until the library is updated.

More in Glib

View all
CVE-2024-52533 CRITICAL POC
9.8 Nov 11

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CON
CVE-2018-16428 CRITICAL POC
9.8 Sep 04

In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference. Rated critical sev
CVE-2020-35457 HIGH POC
7.8 Dec 14

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entri
CVE-2025-13601 HIGH POC
7.7 Nov 26

Heap-based buffer overflow in GLib's g_escape_uri_string() function allows local attackers to achieve high-integrity and
CVE-2021-27219 HIGH POC
7.5 Feb 15

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. Rated high severity (CVSS 7.5), this vulne
CVE-2018-16429 HIGH POC
7.5 Sep 04

GNOME GLib 2.56.1 has an out-of-bounds read vulnerability in g_markup_parse_context_parse() in gmarkup.c, related to utf
CVE-2020-6750 MEDIUM POC
5.9 Jan 09

GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting v
CVE-2025-14087 CRITICAL
9.8 Dec 10

Heap corruption in GLib (GNOME's core C utility library) lets remote attackers trigger a buffer-underflow in the GVarian
CVE-2019-12450 CRITICAL
9.8 May 29

file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while

CVE-2021-28153 MEDIUM POC
5.3 Mar 11

An issue was discovered in GNOME GLib before 2.66.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely ex
CVE-2024-34397 MEDIUM POC
5.2 May 07

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Rated medium severity (CVSS 5.
CVE-2026-58016 CRITICAL
9.1 Jun 30

Denial of service in GNOME GLib (versions before 2.88.1) arises when g_dbus_node_info_new_for_xml() parses malformed D-B

Same weakness CWE-126 – Buffer Over-read

View all
CVE-2017-7668 HIGH
7.5
CVE-2017-7679 CRITICAL POC
9.8
CVE-2021-34584 CRITICAL POC
9.1
CVE-2022-1987 HIGH POC
8.1
CVE-2022-1908 HIGH POC
8.1
CVE-2022-1907 HIGH POC
8.1
CVE-2026-64905 HIGH
7.8
CVE-2023-0817 HIGH POC
7.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
Container suse/sles/16.0/toolbox:latest Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Fixed

Share

CVE-2026-58013 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy