VDB

CVE-2026-58013

CVE-2026-58013 PUBLISHED CVSS 6.5 MEDIUM

Reported by redhat · Published June 30, 2026

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected Products

VendorProductVersions
GNOMEGLib0
Red HatRed Hat Enterprise Linux 100:2.80.4-12.el10_2.21
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:2.80.4-4.el10_0.17
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:2.56.1-13.el7_9.1
Red HatRed Hat Enterprise Linux 80:2.70.1-9.el8_10
Red HatRed Hat Enterprise Linux 80:2.56.4-177.el8_10
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:2.56.4-10.el8_4.7
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On0:2.56.4-10.el8_4.7
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:2.56.4-158.el8_6.7
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On0:2.56.4-158.el8_6.7
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service0:2.56.4-165.el8_8.2
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions0:2.56.4-165.el8_8.2
Red HatRed Hat Enterprise Linux 90:2.68.4-19.el9_8.9
Red HatRed Hat Enterprise Linux 90:2.68.4-19.el9_8.9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0:2.68.4-7.el9_2.7
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0:2.68.4-14.el9_4.8
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0:2.68.4-16.el9_6.7
Red HatCert Manager support for Red Hat OpenShift release 1.171791371080
Red HatCert Manager support for Red Hat OpenShift release 1.171791371069
Red HatCert Manager support for Red Hat OpenShift release 1.171791788287

…and 160 more

Timeline

  • Jun 30, 2026 CVE Published
  • Jul 1, 2026 Coalition ESS Score
  • Jul 2, 2026 EPSS Score
  • Aug 3, 2026 Distribution Patch
  • Aug 3, 2026 Security Advisory
  • Aug 7, 2026 EPSS Score
  • Aug 17, 2026 Distribution Patch
  • Aug 17, 2026 Security Advisory
  • Aug 17, 2026 Distribution Patch
  • Aug 19, 2026 Distribution Patch
  • Aug 19, 2026 Security Advisory
  • Aug 24, 2026 EPSS Score

References

…and 56 more

Open in Interactive Console →
$ Console Community · 50/day Open console ›