CVE-2026-58010
⚪ Do wiadomości
Błąd off-by-one w GLib może prowadzić do ujawnienia informacji i odmowy usługi.
CVSS
6.5
EPSS
0.9%
Exploit
poc
Vendor
redhat
Opis źródłowy (NVD)
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
dos exploit
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 6.5 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.9% |
| Opublikowano (NVD) | 2026-06-30 13:19:17 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-02 03:16:47 UTC |
Referencje
- https://access.redhat.com/errata/RHSA-2026:49512 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:55440 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:57015 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:58981 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:61766 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:61783 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:63135 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:63138 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:63140 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65762 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65763 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65767 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65768 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65769 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65770 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65771 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:65773 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:66018 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:72394 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:72395 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:72399 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:72470 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:72475 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:72476 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:72502 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73859 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73909 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73929 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73930 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73959 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73960 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73961 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:73962 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74458 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74459 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74460 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74461 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74462 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74463 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74674 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74677 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74678 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74679 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74681 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74683 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74685 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74687 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74688 ([email protected])
- https://access.redhat.com/errata/RHSA-2026:74771 ([email protected])
- https://access.redhat.com/security/cve/CVE-2026-58010 ([email protected]) [Third Party Advisory]
- https://bugzilla.redhat.com/show_bug.cgi?id=2492243 ([email protected]) [Issue Tracking, Third Party Advisory]
- https://gitlab.gnome.org/GNOME/glib/-/issues/3915 ([email protected]) [Exploit, Issue Tracking, Vendor Advisory]