VDB

CVE-2026-16118

CVE-2026-16118 PUBLISHED CVSS 7.1 HIGH

Reported by redhat · Published July 17, 2026

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.

Risk Scores

CVSS 3.1
7.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Affected Products

VendorProductVersions
xdgxdgmime
Red HatRed Hat Enterprise Linux 100:2.80.4-12.el10_2.22
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:2.80.4-4.el10_0.18
Red HatRed Hat Enterprise Linux 80:2.56.4-178.el8_10
Red HatRed Hat Enterprise Linux 90:2.68.4-19.el9_8.10
Red HatRed Hat Enterprise Linux 90:2.68.4-19.el9_8.10
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:2.68.4-7.el9_2.8
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:2.68.4-14.el9_4.9
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:2.68.4-16.el9_6.8
Red HatCert Manager support for Red Hat OpenShift release 1.171791371080
Red HatCert Manager support for Red Hat OpenShift release 1.171791371069
Red HatCert Manager support for Red Hat OpenShift release 1.171791788287
Red HatCert Manager support for Red Hat OpenShift release 1.171791378395
Red HatCert Manager support for Red Hat OpenShift release 1.171791970484
Red HatCert Manager support for Red Hat OpenShift release 1.181791459707
Red HatCert Manager support for Red Hat OpenShift release 1.181791459711
Red HatCert Manager support for Red Hat OpenShift release 1.181791459759
Red HatCert Manager support for Red Hat OpenShift release 1.181789029076
Red HatCert Manager support for Red Hat OpenShift release 1.181791966259
Red HatCert Manager support for Red Hat OpenShift release 1.201790223279

…and 143 more

Timeline

  • Jul 17, 2026 Coalition ESS Score
  • Jul 17, 2026 CVE Published
  • Jul 18, 2026 EPSS Score
  • Jul 19, 2026 Security Advisory
  • Jul 29, 2026 CVE Updated
  • Aug 7, 2026 EPSS Score
  • Aug 24, 2026 EPSS Score
  • Sep 6, 2026 EPSS Score
  • Sep 9, 2026 EPSS Score
  • Sep 11, 2026 Distribution Patch
  • Sep 11, 2026 Security Advisory
  • Sep 12, 2026 EPSS Score

References

…and 55 more

Open in Interactive Console →
$ Console Community · 50/day Open console ›