CVE-2026-58010

Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Published Jun 30, 2026 CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Description
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Ubuntu USN Ubuntu USN USN-8794-1 GLib vulnerabilities
References
Link Providers
https://access.redhat.com/errata/RHSA-2026:49512 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:55440 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:57015 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:58981 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:61766 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:61783 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:63135 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:63138 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:63140 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65762 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65763 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65767 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65768 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65769 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65770 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65771 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:65773 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:66018 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72394 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72395 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72399 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72470 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72475 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72476 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72502 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73859 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73909 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73929 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73930 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73959 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73960 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73961 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73962 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74458 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74459 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74460 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74461 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74462 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74463 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74674 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74677 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74678 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74679 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74681 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74683 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74685 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74687 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74688 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74771 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75652 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75654 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75655 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75657 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75658 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75659 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75660 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:76042 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:80769 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:80771 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82059 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82061 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82066 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82304 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82322 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82336 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82347 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82354 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82368 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82371 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82372 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82415 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82857 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82888 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:92449 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:92452 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:97163 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-58010 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2492243 cve-icon cve-icon
https://gitlab.gnome.org/GNOME/glib/-/issues/3915 cve-icon cve-icon
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:10.3
References
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift_ai
Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:9
cpe:/a:redhat:enterprise_linux:10
cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:rhel_els:6
Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Ai
CPEs cpe:/a:redhat:enterprise_linux_ai:3.5::el9
Vendors & Products Redhat enterprise Linux Ai
References
Type Values Removed Values Added
First Time appeared Redhat ai Inference Server
CPEs cpe:/a:redhat:ai_inference_server:3.2::el9
Vendors & Products Redhat ai Inference Server
References
Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Eus
Redhat rhel Eus
Redhat rhel Tus
CPEs cpe:/a:redhat:rhel_eus:9.6::appstream
cpe:/a:redhat:rhel_eus:9.6::crb
cpe:/o:redhat:enterprise_linux_eus:10.0
cpe:/o:redhat:rhel_aus:8.6::baseos
cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_eus:9.6::baseos
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos
Vendors & Products Redhat enterprise Linux Eus
Redhat rhel Eus
Redhat rhel Tus
References
Type Values Removed Values Added
First Time appeared Redhat rhel E4s
Redhat rhel Els
CPEs cpe:/o:redhat:enterprise_linux:7 cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/a:redhat:rhel_e4s:9.4::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
cpe:/o:redhat:rhel_e4s:9.4::baseos
cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel E4s
Redhat rhel Els
References
Type Values Removed Values Added
First Time appeared Redhat rhel Aus
Redhat rhel Eus Long Life
CPEs cpe:/o:redhat:rhel_aus:8.4::baseos
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Vendors & Products Redhat rhel Aus
Redhat rhel Eus Long Life
References
Type Values Removed Values Added
First Time appeared Redhat discovery
CPEs cpe:/a:redhat:discovery:2::el9
Vendors & Products Redhat discovery
References
Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:8::baseos
References
Type Values Removed Values Added
First Time appeared Redhat rhui
CPEs cpe:/a:redhat:rhui:5::el9
Vendors & Products Redhat rhui
References
Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10.2
References
Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/o:redhat:enterprise_linux:9::baseos
References
Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8::crb
References
Type Values Removed Values Added
First Time appeared Gnome
Gnome glib
Redhat hardened Images
Vendors & Products Gnome
Gnome glib
Redhat hardened Images
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
Title Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
First Time appeared Redhat
Redhat enterprise Linux
Redhat hummingbird
Weaknesses CWE-126
CPEs cpe:/a:redhat:hummingbird:1
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat hummingbird
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L'}