VDB
CVE-2026-58014
CVE-2026-58014
PUBLISHED
CVSS 7.3 HIGH
Reported by redhat · Published June 30, 2026
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
Risk Scores
CVSS 3.1
7.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| GNOME | GLib | 0 |
| Red Hat | Red Hat Enterprise Linux 10 | 0:2.80.4-12.el10_2.21 |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:2.80.4-4.el10_0.17 |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:2.56.1-13.el7_9.1 |
| Red Hat | Red Hat Enterprise Linux 8 | 0:2.70.1-9.el8_10 |
| Red Hat | Red Hat Enterprise Linux 8 | 0:2.56.4-177.el8_10 |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:2.56.4-10.el8_4.7 |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 0:2.56.4-10.el8_4.7 |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:2.56.4-158.el8_6.7 |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | 0:2.56.4-158.el8_6.7 |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:2.56.4-165.el8_8.2 |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:2.56.4-165.el8_8.2 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.68.4-19.el9_8.9 |
| Red Hat | Red Hat Enterprise Linux 9 | 0:2.68.4-19.el9_8.9 |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:2.68.4-7.el9_2.7 |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:2.68.4-14.el9_4.8 |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:2.68.4-16.el9_6.7 |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | 412.86.202609171314-0 |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | 413.92.202609302032-0 |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | 414.92.202609282130-0 |
…and 177 more
Timeline
- Jun 30, 2026 CVE Published
- Jul 1, 2026 Coalition ESS Score
- Jul 2, 2026 EPSS Score
- Aug 3, 2026 Distribution Patch
- Aug 3, 2026 Security Advisory
- Aug 7, 2026 EPSS Score
- Aug 17, 2026 Distribution Patch
- Aug 17, 2026 Security Advisory
- Aug 17, 2026 Distribution Patch
- Aug 19, 2026 Distribution Patch
- Aug 19, 2026 Security Advisory
- Aug 24, 2026 EPSS Score
References
- RHSA-2026:49512 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:55440 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:57015 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:58981 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:61766 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:61783 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:63135 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:63138 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:63140 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65762 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65763 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65767 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65768 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65769 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65770 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65771 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:65773 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:66018 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:66357 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:70586 vendor-advisoryx_refsource_REDHAT
…and 63 more