« List of all CVEs

CVE-2026-58013

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Published: 6/30/2026 Last updated: 6/30/2026 Reserved: 6/26/2026

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 6.5 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Opam packages affected (1)

conf-glib-2

Products affected (10)

Product Vendor Version
GLib GNOME n/a
Red Hat Enterprise Linux 10 Red Hat < 1.2.2
Red Hat Enterprise Linux 6 Red Hat openshift-enterprise version 3.11
Red Hat Enterprise Linux 7 Red Hat from openshift-enterprise version 4.1 to, including 4.3
Red Hat Enterprise Linux 8 Red Hat < 6.0.x*
Red Hat Hardened Images Red Hat Android-8.0 Android-8.1 Android-9 Android-10
Red Hat Enterprise Linux 9 Red Hat n/a
Red Hat Enterprise Linux 10 Red Hat n/a
Red Hat Enterprise Linux 9 Red Hat < publication
Red Hat Enterprise Linux 8 Red Hat < 7.0.27

References (3)

Credits (1)