CVE-2026-58012

Name of the Vulnerable Software and Affected Versions GLib (affected versions not specified)

Description A buffer over-read can occur in the g regex replace() function when the G REGEX RAW compile flag is used alongside case-change replacement escapes. This happens because the string append() function processes matched substrings using UTF-8 functions, such as g utf8 next char(), which assume valid UTF-8 input even when the string is treated as raw bytes. This issue can lead to a minor information disclosure of 1-5 bytes or a denial of service if the buffer over-read crosses a page boundary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.