CVE detail
CVE-2026-58012
A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 4
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()Microsoft MSRC
Information published.
vendormsrc.microsoft.comJul 1, 2026, 8:02 AM - https://gitlab.gnome.org/GNOME/glib/-/issues/3918gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgJun 30, 2026, 1:19 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2492247bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 30, 2026, 1:19 PM - https://access.redhat.com/security/cve/CVE-2026-58012access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 30, 2026, 1:19 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-58013CVSS 6.5 · Medium
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is…
- CVE-2026-58010CVSS 6.5 · Medium
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because th…
- CVE-2026-11787CVSS 5.0 · Medium
A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string…
- CVE-2026-58016CVSS 7.5 · High
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML,…
- CVE-2026-58015CVSS 5.9 · Medium
A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from t…
- CVE-2026-58014CVSS 7.3 · High
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This…