8.2

CVE-2026-58010

Exploit

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Glib Version < 2.86.5
Gnome ≫ Glib Version 2.88.0
Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Enterprise Linux Version 10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.324
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
RedHat 6.5 3.9 2.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

https://bugzilla.redhat.com/show_bug.cgi?id=2492243
Third Party Advisory
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:49512
https://access.redhat.com/security/cve/CVE-2026-58010
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3915
Vendor Advisory
Exploit
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:55440
https://access.redhat.com/errata/RHSA-2026:57015
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:61766
https://access.redhat.com/errata/RHSA-2026:61783
https://access.redhat.com/errata/RHSA-2026:63135
https://access.redhat.com/errata/RHSA-2026:63138
https://access.redhat.com/errata/RHSA-2026:63140
https://access.redhat.com/errata/RHSA-2026:65762
https://access.redhat.com/errata/RHSA-2026:65768
https://access.redhat.com/errata/RHSA-2026:65770
https://access.redhat.com/errata/RHSA-2026:65773
https://access.redhat.com/errata/RHSA-2026:65763
https://access.redhat.com/errata/RHSA-2026:65767
https://access.redhat.com/errata/RHSA-2026:65769
https://access.redhat.com/errata/RHSA-2026:65771
https://access.redhat.com/errata/RHSA-2026:66018
https://access.redhat.com/errata/RHSA-2026:72394
https://access.redhat.com/errata/RHSA-2026:72395
https://access.redhat.com/errata/RHSA-2026:72399
https://access.redhat.com/errata/RHSA-2026:72470
https://access.redhat.com/errata/RHSA-2026:72475
https://access.redhat.com/errata/RHSA-2026:72476
https://access.redhat.com/errata/RHSA-2026:72502
https://access.redhat.com/errata/RHSA-2026:73859
https://access.redhat.com/errata/RHSA-2026:73909
https://access.redhat.com/errata/RHSA-2026:73959
https://access.redhat.com/errata/RHSA-2026:73960
https://access.redhat.com/errata/RHSA-2026:73961
https://access.redhat.com/errata/RHSA-2026:73962
https://access.redhat.com/errata/RHSA-2026:73929
https://access.redhat.com/errata/RHSA-2026:73930
https://access.redhat.com/errata/RHSA-2026:74458
https://access.redhat.com/errata/RHSA-2026:74459
https://access.redhat.com/errata/RHSA-2026:74460
https://access.redhat.com/errata/RHSA-2026:74461
https://access.redhat.com/errata/RHSA-2026:74462
https://access.redhat.com/errata/RHSA-2026:74463
https://access.redhat.com/errata/RHSA-2026:74674
https://access.redhat.com/errata/RHSA-2026:74771
https://access.redhat.com/errata/RHSA-2026:74677
https://access.redhat.com/errata/RHSA-2026:74678
https://access.redhat.com/errata/RHSA-2026:74679
https://access.redhat.com/errata/RHSA-2026:74681
https://access.redhat.com/errata/RHSA-2026:74683
https://access.redhat.com/errata/RHSA-2026:74685
https://access.redhat.com/errata/RHSA-2026:74687
https://access.redhat.com/errata/RHSA-2026:74688
https://access.redhat.com/errata/RHSA-2026:75652
https://access.redhat.com/errata/RHSA-2026:75654
https://access.redhat.com/errata/RHSA-2026:75655
https://access.redhat.com/errata/RHSA-2026:75657
https://access.redhat.com/errata/RHSA-2026:75658
https://access.redhat.com/errata/RHSA-2026:75659
https://access.redhat.com/errata/RHSA-2026:75660
https://access.redhat.com/errata/RHSA-2026:76042