High severity7.3NVD Advisory· Published Jun 30, 2026· Updated Aug 3, 2026
CVE-2026-58014
CVE-2026-58014
Description
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*range: <2.88.1
- (no CPE)
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords6 versionspkg:rpm/almalinux/mingw32-glib2pkg:rpm/almalinux/mingw32-glib2-staticpkg:rpm/almalinux/mingw64-glib2pkg:rpm/almalinux/mingw64-glib2-staticpkg:rpm/opensuse/glib2&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/glib2-doc&distro=openSUSE%20Leap%2016.0
< 2.70.1-9.el8_10+ 5 more
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.84.4-160000.4.1
- (no CPE)range: < 2.84.4-160000.4.1
Patches
Vulnerability mechanics
References
4- gitlab.gnome.org/GNOME/glib/-/issues/3930nvdExploitIssue TrackingThird Party Advisory
- access.redhat.com/security/cve/CVE-2026-58014nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- access.redhat.com/errata/RHSA-2026:49512nvd
News mentions
0No linked articles in our index yet.