CVEvulnerability

CVE-2026-58016

9.1 CRITICAL Published 2026-06-30 Modified 2026-10-29 Official page ↗
Status
Analyzed
Published
2026-06-30
Last modified
2026-10-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-191

Description

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

Affected configurations

• gnome glib (< 2.89.0) • redhat cert-manager operator (>= 1.18.0 < 1.18.2) • redhat cert-manager operator 1.17.0 • redhat cert-manager operator 1.20.0 • redhat codeready linux builder 8.0 • redhat codeready linux builder 9.0 • redhat codeready linux builder 10.0 • redhat codeready linux builder eus 9.6 • redhat codeready linux builder eus 10.0 • redhat discovery 2.0 • redhat insights-proxy 1.5.0 • redhat openshift ai (>= 3.0 < 3.0.3) • redhat openshift ai (>= 3.2 < 3.2.3) • redhat openshift ai (>= 3.4 < 3.4.3) • redhat update infrastructure (>= 5.0 < 5.2) • redhat enterprise linux 6.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • redhat enterprise linux aus 8.4 • redhat enterprise linux aus 8.6 • redhat enterprise linux els 7.0 • redhat enterprise linux eus 8.4 • redhat enterprise linux eus 8.6 • redhat enterprise linux eus 9.6 • redhat enterprise linux eus 10.0 • redhat enterprise linux server tus 8.8 • redhat enterprise linux update services for sap solutions 8.8 • redhat enterprise linux update services for sap solutions 9.2 • redhat enterprise linux update services for sap solutions 9.4

Related

Weakness · CWE (1)

  • CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References