CVE-2026-58010

CVE-2026-58010 · Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.

CVSS 6.5 · Medium · EPSS 0.5% · Fix available

Published: 2026-06-30T12:57:15.125Z
Updated: 2026-10-14T19:28:19.296Z

Stack: system

Affected products and versions

glib
Versions
- ≥ 0, < 2.86.5: Affected (semver)
- ≥ 0, < 2.88.1: Affected (semver)
Update to 2.86.5
red hat enterprise linux 10
Versions
- ≥ 0:2.80.4-12.el10_2.21: Not affected (rpm)
No fix published
red hat enterprise linux 10.0 extended update support
Versions
- ≥ 0:2.80.4-4.el10_0.17: Not affected (rpm)
No fix published
red hat enterprise linux 7 extended lifecycle support
Versions
- ≥ 0:2.56.1-13.el7_9.1: Not affected (rpm)
No fix published
red hat enterprise linux 8
Versions
- ≥ 0:2.70.1-9.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8
Versions
- ≥ 0:2.56.4-177.el8_10: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 advanced mission critical update support
Versions
- ≥ 0:2.56.4-10.el8_4.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.4 extended update support long-life add-on
Versions
- ≥ 0:2.56.4-10.el8_4.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 advanced mission critical update support
Versions
- ≥ 0:2.56.4-158.el8_6.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.6 extended update support long-life add-on
Versions
- ≥ 0:2.56.4-158.el8_6.7: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 telecommunications update service
Versions
- ≥ 0:2.56.4-165.el8_8.2: Not affected (rpm)
No fix published
red hat enterprise linux 8.8 update services for sap solutions
Versions
- ≥ 0:2.56.4-165.el8_8.2: Not affected (rpm)
No fix published
red hat enterprise linux 9
Versions
- ≥ 0:2.68.4-19.el9_8.9: Not affected (rpm)
No fix published
red hat enterprise linux 9.2 update services for sap solutions
Versions
- ≥ 0:2.68.4-7.el9_2.7: Not affected (rpm)
No fix published
red hat enterprise linux 9.4 update services for sap solutions
Versions
- ≥ 0:2.68.4-14.el9_4.8: Not affected (rpm)
No fix published
red hat enterprise linux 9.6 extended update support
Versions
- ≥ 0:2.68.4-16.el9_6.7: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
Versions
- ≥ 1791371080: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
Versions
- ≥ 1791371069: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
Versions
- ≥ 1791788287: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
Versions
- ≥ 1791378395: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.17
Versions
- ≥ 1791970484: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.18
Versions
- ≥ 1791459707: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.18
Versions
- ≥ 1791459711: Not affected (rpm)
No fix published
cert manager support for red hat openshift release 1.18
Versions
- ≥ 1791459759: Not affected (rpm)
No fix published

Original sources

Check your server →