CVE-2026-16118

Name of the Vulnerable Software and Affected Versions xdgmime (affected versions not specified)

Description A heap-based buffer overflow exists in the xdg mime magic parse magic line() function within the xdgmimemagic.c file on little-endian systems. The issue occurs when an application performs MIME type detection, such as through the g content type guess() function, and parses a crafted MIME magic file located in a user-writable XDG data location, such as the $XDG DATA HOME/mime/magic path. Incorrect pointer arithmetic during byte-swap operations leads to an out-of-bounds write of 2 bytes, which can result in memory corruption or an application crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.