CVE-2026-58016

CVE-2026-58016 · Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

CVSS 7.5 · High · EPSS 0.5% · Fix available

Published

2026-06-30T13:02:45.931Z

Updated

2026-10-14T19:10:38.064Z

Stack: system

Check your server →