Medium severity6.5NVD Advisory· Published Jun 30, 2026· Updated Sep 28, 2026
CVE-2026-58010
CVE-2026-58010
Description
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*range: <2.86.5
- cpe:2.3:a:gnome:glib:2.88.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords12 versionspkg:rpm/almalinux/glib2pkg:rpm/almalinux/glib2-develpkg:rpm/almalinux/glib2-docpkg:rpm/almalinux/glib2-fampkg:rpm/almalinux/glib2-staticpkg:rpm/almalinux/glib2-testspkg:rpm/almalinux/mingw32-glib2pkg:rpm/almalinux/mingw32-glib2-staticpkg:rpm/almalinux/mingw64-glib2pkg:rpm/almalinux/mingw64-glib2-staticpkg:rpm/opensuse/glib2&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/glib2-doc&distro=openSUSE%20Leap%2016.0
< 2.68.4-19.el9_8.9+ 11 more
- (no CPE)range: < 2.68.4-19.el9_8.9
- (no CPE)range: < 2.68.4-19.el9_8.9
- (no CPE)range: < 2.68.4-19.el9_8.9
- (no CPE)range: < 2.56.4-177.el8_10
- (no CPE)range: < 2.68.4-19.el9_8.9
- (no CPE)range: < 2.68.4-19.el9_8.9
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.84.4-160000.4.1
- (no CPE)range: < 2.84.4-160000.4.1
Patches
Vulnerability mechanics
References
27- gitlab.gnome.org/GNOME/glib/-/issues/3915nvdExploitIssue TrackingVendor Advisory
- access.redhat.com/security/cve/CVE-2026-58010nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- access.redhat.com/errata/RHSA-2026:49512nvd
- access.redhat.com/errata/RHSA-2026:55440nvd
- access.redhat.com/errata/RHSA-2026:57015nvd
- access.redhat.com/errata/RHSA-2026:58981nvd
- access.redhat.com/errata/RHSA-2026:61766nvd
- access.redhat.com/errata/RHSA-2026:61783nvd
- access.redhat.com/errata/RHSA-2026:63135nvd
- access.redhat.com/errata/RHSA-2026:63138nvd
- access.redhat.com/errata/RHSA-2026:63140nvd
- access.redhat.com/errata/RHSA-2026:65762nvd
- access.redhat.com/errata/RHSA-2026:65763nvd
- access.redhat.com/errata/RHSA-2026:65767nvd
- access.redhat.com/errata/RHSA-2026:65768nvd
- access.redhat.com/errata/RHSA-2026:65769nvd
- access.redhat.com/errata/RHSA-2026:65770nvd
- access.redhat.com/errata/RHSA-2026:65771nvd
- access.redhat.com/errata/RHSA-2026:65773nvd
- access.redhat.com/errata/RHSA-2026:66018nvd
- access.redhat.com/errata/RHSA-2026:72394nvd
- access.redhat.com/errata/RHSA-2026:72395nvd
- access.redhat.com/errata/RHSA-2026:72399nvd
- access.redhat.com/errata/RHSA-2026:72470nvd
- access.redhat.com/errata/RHSA-2026:72475nvd
- access.redhat.com/errata/RHSA-2026:72476nvd
News mentions
1- GNOME GLib & GIMP: Six Vulnerabilities Disclosed, Including Code Execution FlawsVypr Intelligence · Jul 3, 2026