CVE-2026-58014CWE-193

CVE-2026-58014

High · published June 30, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
41.1
In the wild
Unconfirmed
What it is

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00488 · 41.1th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2026-06-30T17:19Z
Affected products (6)
ProductVersionsFixed in
gnome/glib< 2.88.12.88.1
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (84)
https://access.redhat.com/errata/RHSA-2026:49512 · [email protected]https://access.redhat.com/errata/RHSA-2026:55440 · [email protected]https://access.redhat.com/errata/RHSA-2026:57015 · [email protected]https://access.redhat.com/errata/RHSA-2026:58981 · [email protected]https://access.redhat.com/errata/RHSA-2026:61766 · [email protected]https://access.redhat.com/errata/RHSA-2026:61783 · [email protected]https://access.redhat.com/errata/RHSA-2026:63135 · [email protected]https://access.redhat.com/errata/RHSA-2026:63138 · [email protected]https://access.redhat.com/errata/RHSA-2026:63140 · [email protected]https://access.redhat.com/errata/RHSA-2026:65762 · [email protected]https://access.redhat.com/errata/RHSA-2026:65763 · [email protected]https://access.redhat.com/errata/RHSA-2026:65767 · [email protected]https://access.redhat.com/errata/RHSA-2026:65768 · [email protected]https://access.redhat.com/errata/RHSA-2026:65769 · [email protected]https://access.redhat.com/errata/RHSA-2026:65770 · [email protected]https://access.redhat.com/errata/RHSA-2026:65771 · [email protected]https://access.redhat.com/errata/RHSA-2026:65773 · [email protected]https://access.redhat.com/errata/RHSA-2026:66018 · [email protected]https://access.redhat.com/errata/RHSA-2026:66357 · [email protected]https://access.redhat.com/errata/RHSA-2026:70586 · [email protected]https://access.redhat.com/errata/RHSA-2026:70646 · [email protected]https://access.redhat.com/errata/RHSA-2026:72394 · [email protected]https://access.redhat.com/errata/RHSA-2026:72395 · [email protected]https://access.redhat.com/errata/RHSA-2026:72399 · [email protected]https://access.redhat.com/errata/RHSA-2026:72470 · [email protected]https://access.redhat.com/errata/RHSA-2026:72475 · [email protected]https://access.redhat.com/errata/RHSA-2026:72476 · [email protected]https://access.redhat.com/errata/RHSA-2026:72502 · [email protected]https://access.redhat.com/errata/RHSA-2026:73851 · [email protected]https://access.redhat.com/errata/RHSA-2026:73859 · [email protected]https://access.redhat.com/errata/RHSA-2026:73866 · [email protected]https://access.redhat.com/errata/RHSA-2026:73909 · [email protected]https://access.redhat.com/errata/RHSA-2026:73929 · [email protected]https://access.redhat.com/errata/RHSA-2026:73930 · [email protected]https://access.redhat.com/errata/RHSA-2026:73959 · [email protected]https://access.redhat.com/errata/RHSA-2026:73960 · [email protected]https://access.redhat.com/errata/RHSA-2026:73961 · [email protected]https://access.redhat.com/errata/RHSA-2026:73962 · [email protected]https://access.redhat.com/errata/RHSA-2026:74458 · [email protected]https://access.redhat.com/errata/RHSA-2026:74459 · [email protected]https://access.redhat.com/errata/RHSA-2026:74460 · [email protected]https://access.redhat.com/errata/RHSA-2026:74461 · [email protected]https://access.redhat.com/errata/RHSA-2026:74462 · [email protected]https://access.redhat.com/errata/RHSA-2026:74463 · [email protected]https://access.redhat.com/errata/RHSA-2026:74674 · [email protected]https://access.redhat.com/errata/RHSA-2026:74677 · [email protected]https://access.redhat.com/errata/RHSA-2026:74678 · [email protected]https://access.redhat.com/errata/RHSA-2026:74679 · [email protected]https://access.redhat.com/errata/RHSA-2026:74681 · [email protected]https://access.redhat.com/errata/RHSA-2026:74683 · [email protected]https://access.redhat.com/errata/RHSA-2026:74685 · [email protected]https://access.redhat.com/errata/RHSA-2026:74687 · [email protected]https://access.redhat.com/errata/RHSA-2026:74688 · [email protected]https://access.redhat.com/errata/RHSA-2026:74771 · [email protected]https://access.redhat.com/errata/RHSA-2026:75652 · [email protected]https://access.redhat.com/errata/RHSA-2026:75654 · [email protected]https://access.redhat.com/errata/RHSA-2026:75655 · [email protected]https://access.redhat.com/errata/RHSA-2026:75657 · [email protected]https://access.redhat.com/errata/RHSA-2026:75658 · [email protected]https://access.redhat.com/errata/RHSA-2026:75659 · [email protected]https://access.redhat.com/errata/RHSA-2026:75660 · [email protected]https://access.redhat.com/errata/RHSA-2026:76042 · [email protected]https://access.redhat.com/errata/RHSA-2026:77320 · [email protected]https://access.redhat.com/errata/RHSA-2026:80769 · [email protected]https://access.redhat.com/errata/RHSA-2026:80771 · [email protected]https://access.redhat.com/errata/RHSA-2026:82059 · [email protected]https://access.redhat.com/errata/RHSA-2026:82061 · [email protected]https://access.redhat.com/errata/RHSA-2026:82066 · [email protected]https://access.redhat.com/errata/RHSA-2026:82304 · [email protected]https://access.redhat.com/errata/RHSA-2026:82322 · [email protected]https://access.redhat.com/errata/RHSA-2026:82336 · [email protected]https://access.redhat.com/errata/RHSA-2026:82347 · [email protected]https://access.redhat.com/errata/RHSA-2026:82354 · [email protected]https://access.redhat.com/errata/RHSA-2026:82368 · [email protected]https://access.redhat.com/errata/RHSA-2026:82371 · [email protected]https://access.redhat.com/errata/RHSA-2026:82372 · [email protected]https://access.redhat.com/errata/RHSA-2026:82415 · [email protected]https://access.redhat.com/errata/RHSA-2026:82811 · [email protected]https://access.redhat.com/errata/RHSA-2026:82857 · [email protected]https://access.redhat.com/errata/RHSA-2026:82888 · [email protected]https://access.redhat.com/security/cve/CVE-2026-58014 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2492255 · [email protected]https://gitlab.gnome.org/GNOME/glib/-/issues/3930 · [email protected]https://gitlab.gnome.org/GNOME/glib/-/issues/3930 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 30 JUN 12:57Z
    Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
    cvelistv5