CVE-2026-58016

Name of the Vulnerable Software and Affected Versions GLib (affected versions not specified)

Description A state confusion issue exists in the g dbus node info new for xml() function within the gio/gdbusintrospection.c file. This occurs when the software processes malformed D-Bus introspection XML, specifically when a <node> element is nested inside other elements such as <method>, <signal>, <property>, or <arg>. This flaw can trigger an unsigned integer overflow, leading to an out-of-bounds read and resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.