CVE-2026-58013mediumCWE-126

CVE-2026-58013: falha de média gravidade em GNOME GLib

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat Enterprise Linux+ Monitorar Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.5%
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Produtos afetados
GNOME · GLibRed Hat · Cert Manager support for Red Hat OpenShift release 1.17Red Hat · Cert Manager support for Red Hat OpenShift release 1.18Red Hat · Cert Manager support for Red Hat OpenShift release 1.19Red Hat · Cert Manager support for Red Hat OpenShift release 1.20Red Hat · Red Hat AI Inference Server 3.2Red Hat · Red Hat AI Inference Server 3.5Red Hat · Red Hat Discovery 2Red Hat · Red Hat Enterprise Linux 10Red Hat · Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRed Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat · Red Hat Enterprise Linux AI 3.5Red Hat · Red Hat Hardened ImagesRed Hat · Red Hat OpenShift AI 3.0Red Hat · Red Hat OpenShift AI 3.2Red Hat · Red Hat OpenShift AI 3.4Red Hat · Red Hat OpenShift AI 3.5Red Hat · Red Hat OpenShift AI (RHOAI)Red Hat · Red Hat Update Infrastructure 5
CVEs relacionadas — GNOME GLib

No mesmo produto, das mais perigosas para as menos.

CVE-2026-33845HIGHGnutls: gnutls: denial of service via dtls zero-length fragmentEPSS 2.1%CVE-2026-42009HIGHGnutls: gnutls: denial of service via dtls packet reordering vulnerabilityEPSS 1.3%CVE-2026-2100MEDIUMP11-kit: null dereference via c_derivekey with specific null parametersEPSS 1.3%CVE-2026-4424HIGHLibarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingEPSS 1.3%CVE-2026-33846HIGHGnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyEPSS 1.3%CVE-2026-5121HIGHLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingEPSS 1.1%