High severity7.5NVD Advisory· Published Jun 30, 2026· Updated Aug 11, 2026
CVE-2026-58016
CVE-2026-58016
Description
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a node element nested within other elements like method, signal, property or arg. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*range: <2.88.1
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords12 versionspkg:rpm/almalinux/glib2pkg:rpm/almalinux/glib2-develpkg:rpm/almalinux/glib2-docpkg:rpm/almalinux/glib2-fampkg:rpm/almalinux/glib2-staticpkg:rpm/almalinux/glib2-testspkg:rpm/almalinux/mingw32-glib2pkg:rpm/almalinux/mingw32-glib2-staticpkg:rpm/almalinux/mingw64-glib2pkg:rpm/almalinux/mingw64-glib2-staticpkg:rpm/opensuse/glib2&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/glib2-doc&distro=openSUSE%20Leap%2016.0
< 2.80.4-12.el10_2.14+ 11 more
- (no CPE)range: < 2.80.4-12.el10_2.14
- (no CPE)range: < 2.80.4-12.el10_2.14
- (no CPE)range: < 2.80.4-12.el10_2.14
- (no CPE)range: < 2.56.4-170.el8_10
- (no CPE)range: < 2.80.4-12.el10_2.14
- (no CPE)range: < 2.80.4-12.el10_2.14
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.70.1-9.el8_10
- (no CPE)range: < 2.84.4-160000.4.1
- (no CPE)range: < 2.84.4-160000.4.1
Patches
Vulnerability mechanics
References
18- gitlab.gnome.org/GNOME/glib/-/issues/3932nvdExploitIssue TrackingThird Party Advisory
- access.redhat.com/security/cve/CVE-2026-58016nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- access.redhat.com/errata/RHSA-2026:42063nvd
- access.redhat.com/errata/RHSA-2026:42089nvd
- access.redhat.com/errata/RHSA-2026:42090nvd
- access.redhat.com/errata/RHSA-2026:44481nvd
- access.redhat.com/errata/RHSA-2026:46836nvd
- access.redhat.com/errata/RHSA-2026:49512nvd
- access.redhat.com/errata/RHSA-2026:51175nvd
- access.redhat.com/errata/RHSA-2026:51176nvd
- access.redhat.com/errata/RHSA-2026:51177nvd
- access.redhat.com/errata/RHSA-2026:51181nvd
- access.redhat.com/errata/RHSA-2026:51182nvd
- access.redhat.com/errata/RHSA-2026:51183nvd
- access.redhat.com/errata/RHSA-2026:51184nvd
- access.redhat.com/errata/RHSA-2026:51185nvd
- access.redhat.com/errata/RHSA-2026:53371nvd
News mentions
1- GNOME GLib & GIMP: Six Vulnerabilities Disclosed, Including Code Execution FlawsVypr Intelligence · Jul 3, 2026