Vulnerability Description
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnome | Glib | < 2.88.1 |
| Redhat | Enterprise Linux | 6.0 |
Related Weaknesses (CWE)
References
- https://access.redhat.com/errata/RHSA-2026:49512
- https://access.redhat.com/errata/RHSA-2026:55440
- https://access.redhat.com/errata/RHSA-2026:57015
- https://access.redhat.com/security/cve/CVE-2026-58013Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2492248Issue TrackingThird Party Advisory
- https://gitlab.gnome.org/GNOME/glib/-/issues/3925ExploitIssue TrackingVendor Advisory
FAQ
What is CVE-2026-58013?
CVE-2026-58013 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp ...
How severe is CVE-2026-58013?
CVE-2026-58013 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-58013?
Check the references section above for vendor advisories and patch information. Affected products include: Gnome Glib, Redhat Enterprise Linux.