CVE-2026-58014

Name of the Vulnerable Software and Affected Versions glib2 (affected versions not specified) mingw-glib2 (affected versions not specified)

Description An off-by-one error exists in the g key file get locale string list() function within the gkeyfile.c file. This issue occurs when the software loads a key file containing an empty value, leading to a 1-byte out-of-bounds read. An attacker can trigger this by providing a crafted .ini-style key file for the application to parse. If the out-of-bounds access crosses a page boundary, it can cause the process to crash, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.