PT-2026-53872

CVE-2026-58013

·

Published

2026-04-03

·

Updated

2026-10-14

Description by

CVSS 3.1
8.2
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Name of the Vulnerable Software and Affected Versions GLib (affected versions not specified)
Description A buffer over-read occurs in the g io channel read line backend() function within the giochannel.c file. This happens when a custom line terminator with a length greater than one is configured, leading the memcmp function to read beyond the GString buffer. This issue can result in a minor information disclosure of 7 bytes or a denial of service if the over-read crosses a page boundary.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2026:49512
ALSA-2026:55440
ALSA-2026:57015
ALSA-2026:61766
AZL-91442
CLSA-2026-1783417293
CLSA-2026-1783417323
CLSA-2026-1783423114
CLSA-2026-1783525266
CLSA-2026-1783589822
CLSA-2026-1783590319
CLSA-2026-1783590412
CLSA-2026-1783792531
CLSA-2026-1783793047
CLSA-2026-1785760071
CLSA-2026-1786005247
CLSA-2026-1786124459
CLSA-2026-1786124808
CLSA-2026-1787062977
ECHO-E657-17CF-15C8
JLSEC-2026-1246
OPENSUSE-SU-2026:21410-1
RHSA-2026:49512
RHSA-2026:55440
RHSA-2026:61766
RHSA-2026:65762
RHSA-2026:65763
RHSA-2026:65767
RHSA-2026:65768
RHSA-2026:65769
RHSA-2026:65770
RHSA-2026:65771
RHSA-2026:65773
SUSE-SU-2026:22846-1
SUSE-SU-2026:22928-1
SUSE-SU-2026:23009-1
SUSE-SU-2026:23078-1
SUSE-SU-2026:3235-1
SUSE-SU-2026:3236-1
SUSE-SU-2026:3341-1
USN-8794-1
Found an issue in the description? Have something to add? Feel free to write us 👾