CVE detail
CVE-2026-58014
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 16.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 4
- within the 30d window
- Peak daily
- 3
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- CVE-2026-58014 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"Microsoft MSRC
Information published.
vendormsrc.microsoft.comJul 1, 2026, 8:02 AM - https://gitlab.gnome.org/GNOME/glib/-/issues/3930gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgJun 30, 2026, 1:19 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2492255bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJun 30, 2026, 1:19 PM - https://access.redhat.com/security/cve/CVE-2026-58014access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJun 30, 2026, 1:19 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-58380CVSS 7.3 · High
A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() function writes a null terminator one byte past the end of…
- CVE-2026-4887CVSS 6.1 · Medium
A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to op…
- CVE-2025-47711CVSS 6.5 · Medium
There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a client makes a specific request for a very large data range,…
- CVE-2022-3821CVSS 5.5 · Medium
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buff…
- CVE-2021-3930CVSS 6.5 · Medium
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MOD…
- CVE-2019-19906CVSS 7.5 · High
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ul…