9.1

CVE-2026-58016

Exploit

Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnome ≫ Glib Version < 2.88.1
Redhat ≫ Enterprise Linux Version 6.0
Redhat ≫ Enterprise Linux Version 7.0
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Enterprise Linux Version 10.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.428
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
RedHat 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-191 Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

https://bugzilla.redhat.com/show_bug.cgi?id=2492257
Third Party Advisory
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:42063
https://access.redhat.com/errata/RHSA-2026:42089
https://access.redhat.com/errata/RHSA-2026:42090
https://access.redhat.com/security/cve/CVE-2026-58016
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3932
Third Party Advisory
Exploit
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:44481
https://access.redhat.com/errata/RHSA-2026:46836
https://access.redhat.com/errata/RHSA-2026:49512
https://access.redhat.com/errata/RHSA-2026:51176
https://access.redhat.com/errata/RHSA-2026:51177
https://access.redhat.com/errata/RHSA-2026:51181
https://access.redhat.com/errata/RHSA-2026:51182
https://access.redhat.com/errata/RHSA-2026:51184
https://access.redhat.com/errata/RHSA-2026:51175
https://access.redhat.com/errata/RHSA-2026:51183
https://access.redhat.com/errata/RHSA-2026:51185
https://access.redhat.com/errata/RHSA-2026:53371
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:72394
https://access.redhat.com/errata/RHSA-2026:72395
https://access.redhat.com/errata/RHSA-2026:72399
https://access.redhat.com/errata/RHSA-2026:72470
https://access.redhat.com/errata/RHSA-2026:72475
https://access.redhat.com/errata/RHSA-2026:72476
https://access.redhat.com/errata/RHSA-2026:72502
https://access.redhat.com/errata/RHSA-2026:73909
https://access.redhat.com/errata/RHSA-2026:73959
https://access.redhat.com/errata/RHSA-2026:73960
https://access.redhat.com/errata/RHSA-2026:73961
https://access.redhat.com/errata/RHSA-2026:73962
https://access.redhat.com/errata/RHSA-2026:74458
https://access.redhat.com/errata/RHSA-2026:74459
https://access.redhat.com/errata/RHSA-2026:74460
https://access.redhat.com/errata/RHSA-2026:74461
https://access.redhat.com/errata/RHSA-2026:74462
https://access.redhat.com/errata/RHSA-2026:74463
https://access.redhat.com/errata/RHSA-2026:74674