CVE detail
CVE-2026-58010
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 4
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- CVE-2026-58010 Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()Microsoft MSRC
Information published.
vendormsrc.microsoft.comJul 1, 2026, 8:01 AM - https://gitlab.gnome.org/GNOME/glib/-/issues/3915gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgJun 30, 2026, 1:19 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2492243bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 30, 2026, 1:19 PM - https://access.redhat.com/security/cve/CVE-2026-58010access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 30, 2026, 1:19 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-58013CVSS 6.5 · Medium
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is…
- CVE-2026-58012CVSS 6.5 · Medium
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because th…
- CVE-2026-11787CVSS 5.0 · Medium
A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string…
- CVE-2026-58016CVSS 7.5 · High
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML,…
- CVE-2026-58015CVSS 5.9 · Medium
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from t…
- CVE-2026-58014CVSS 7.3 · High
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This…