CVE-2026-58013

Published: Jun 30, 2026Modified: Jul 2, 2026

8.2

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Exploitability: 3.9 / Impact: 4.2

Source: NVD

Description

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Affected (6)

Products: Gnome: Glib · Redhat: Enterprise Linux

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gnome Glib	Before 2.88.1
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0

Related CWEs

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (3)

https://access.redhat.com/security/cve/CVE-2026-58013

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2492248

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://gitlab.gnome.org/GNOME/glib/-/issues/3925

Source: secalert@redhat.com

ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.