{"id":"CVE-2026-58013","summary":"Glib: buffer over-read in glib/giochannel.c via \"g_io_channel_read_line_backend\"","details":"A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.","modified":"2026-11-12T02:30:42.626894046Z","published":"2026-06-30T12:57:34.902Z","related":["ALSA-2026:49512","ALSA-2026:55440","ALSA-2026:57015","ALSA-2026:61766","SUSE-SU-2026:22846-1","SUSE-SU-2026:22928-1","SUSE-SU-2026:23009-1","SUSE-SU-2026:23078-1","SUSE-SU-2026:3235-1","SUSE-SU-2026:3236-1","SUSE-SU-2026:3341-1","openSUSE-SU-2026:21410-1"],"database_specific":{"cwe_ids":["CWE-126"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58013.json","unresolved_ranges":[{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"InverseAffectedRanges","range":[{"fixed":"0:2.80.4-12.el10_2.21"},{"fixed":"0:2.89.2-1.el10"},{"fixed":"0:2.80.4-4.el10_0.17"},{"fixed":"0:2.56.1-13.el7_9.1"},{"fixed":"0:2.70.1-9.el8_10"},{"fixed":"0:2.56.4-177.el8_10"},{"fixed":"0:2.56.4-10.el8_4.7"},{"fixed":"0:2.56.4-10.el8_4.7"},{"fixed":"0:2.56.4-158.el8_6.7"},{"fixed":"0:2.56.4-158.el8_6.7"},{"fixed":"0:2.56.4-165.el8_8.2"},{"fixed":"0:2.56.4-165.el8_8.2"},{"fixed":"0:2.68.4-19.el9_8.9"},{"fixed":"0:2.68.4-19.el9_8.9"},{"fixed":"0:2.68.4-7.el9_2.7"},{"fixed":"0:2.68.4-14.el9_4.8"},{"fixed":"0:2.68.4-16.el9_6.7"},{"fixed":"1791371080"},{"fixed":"1791371069"},{"fixed":"1791788287"},{"fixed":"1791378395"},{"fixed":"1791970484"},{"fixed":"1791459707"},{"fixed":"1791459711"},{"fixed":"1791459759"},{"fixed":"1789029076"},{"fixed":"1791966259"},{"fixed":"1788348522"},{"fixed":"1788348571"},{"fixed":"1788348571"},{"fixed":"1788348594"},{"fixed":"1790223279"},{"fixed":"1790223719"},{"fixed":"1790272426"},{"fixed":"1790589998"},{"fixed":"1790589912"},{"fixed":"1790589914"},{"fixed":"1790589855"},{"fixed":"1790598593"},{"fixed":"1790621714"},{"fixed":"1790621718"},{"fixed":"1790621713"},{"fixed":"1791425869"},{"fixed":"1791427182"},{"fixed":"1791803821"},{"fixed":"1791473631"},{"fixed":"1791818357"},{"fixed":"1791473614"},{"fixed":"1788205779"},{"fixed":"1788206196"},{"fixed":"1793206758"},{"fixed":"1793194817"},{"fixed":"1793194815"},{"fixed":"1793194834"},{"fixed":"1793135861"},{"fixed":"1793194815"},{"fixed":"1793135863"},{"fixed":"1790276886"},{"fixed":"1790276884"},{"fixed":"1790277045"},{"fixed":"1790276889"},{"fixed":"1790276974"},{"fixed":"1790703497"},{"fixed":"1790703506"},{"fixed":"1790703590"},{"fixed":"1790703568"},{"fixed":"1790703586"},{"fixed":"1790703494"},{"fixed":"1790703542"},{"fixed":"1790703539"},{"fixed":"1790703553"},{"fixed":"1790703631"},{"fixed":"1790703597"},{"fixed":"1790703641"},{"fixed":"1790703630"},{"fixed":"1790703541"},{"fixed":"1790703545"},{"fixed":"1791231926"},{"fixed":"1791232048"},{"fixed":"1790703552"},{"fixed":"1790703656"},{"fixed":"1790703557"},{"fixed":"1790703707"},{"fixed":"1790703645"},{"fixed":"1790703554"},{"fixed":"1790703554"},{"fixed":"1790703630"},{"fixed":"1790703706"},{"fixed":"1787241211"},{"fixed":"1787135742"},{"fixed":"1787241260"},{"fixed":"1788880445"},{"fixed":"1788880464"},{"fixed":"1788880456"},{"fixed":"1788765051"},{"fixed":"1788880581"}]}]}],"cna_assigner":"redhat"},"references":[{"type":"WEB","url":"https://access.redhat.com/downloads/content/package-browser/"},{"type":"WEB","url":"https://catalog.redhat.com/software/containers/"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:49512"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:55440"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:57015"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:58981"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:61766"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:61783"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:63135"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:63138"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:63140"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65762"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65763"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65767"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65768"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65769"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65770"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65771"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65773"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:66018"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:72394"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:72395"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:72399"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:72470"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:72475"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:72476"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:72502"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73859"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73909"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73929"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73930"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73959"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73960"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73961"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:73962"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74458"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74459"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74460"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74461"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74462"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74463"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74674"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74677"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74678"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74679"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74681"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74683"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74685"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74687"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74688"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:74771"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:75652"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:75654"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:75655"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:75657"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:75658"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:75659"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:75660"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:76042"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:80769"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:80771"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82059"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82061"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82066"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82304"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82322"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82336"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82347"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82354"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82368"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82371"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82372"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82415"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82857"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:82888"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:92449"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:92452"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:97163"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-58013"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58013.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58013"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492248"},{"type":"REPORT","url":"https://gitlab.gnome.org/GNOME/glib/-/issues/3925"},{"type":"PACKAGE","url":"https://gitlab.gnome.org/GNOME/glib/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gnome/glib","events":[{"introduced":"0"},{"fixed":"d43ba363cb9a2c6a81da068293764ad65a99ea57"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0"},{"fixed":"2.88.1"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*"}]}},{"type":"GIT","repo":"https://gitlab.gnome.org/gnome/glib","events":[{"introduced":"0"},{"fixed":"d43ba363cb9a2c6a81da068293764ad65a99ea57"}],"database_specific":{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandardRange","range":[{"introduced":"0"},{"fixed":"2.88.1"}]},{"cpe":"cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*","range":[{"introduced":"0"},{"fixed":"2.88.1"}],"source":"CPE_RANGE"}]}}],"versions":["2.88.0","2.87.5","2.87.4","2.87.3","2.87.2","2.87.1","2.87.0","2.86.0","2.85.4","2.85.3","2.85.2","2.85.1","2.85.0","2.84.1","2.83.5","2.84.0","2.83.4","2.83.3","2.83.2","2.83.1","2.83.0","2.81.2","2.81.0","2.80.0","2.79.3","2.79.2","2.79.1","2.79.0","2.78.0","2.77.3","2.77.2","2.77.1","2.77.0","2.76.1","2.76.0","2.75.4","2.75.3","2.75.2","2.75.1","2.75.0","2.74.0","2.73.3","2.73.2","2.73.1","2.73.0","2.72.0","2.71.3","2.71.2","2.71.1","2.71.0","2.70.0","2.69.3","2.69.2","2.69.1","2.69.0","2.68.0","2.67.6","2.67.5","2.67.4","2.67.3","2.67.2","2.67.1","2.67.0","2.66.0","2.65.3","2.65.2","2.65.1","2.65.0","2.64.0","2.63.6","2.63.5","2.63.4","2.63.3","2.63.2","2.63.1","2.63.0","2.62.0","2.61.3","2.61.2","2.61.1","2.61.0","2.60.0","2.59.3","2.59.2","2.59.1","2.59.0","2.57.3","2.58.0","2.57.2","2.57.1","2.56.0","2.55.1","2.55.0","2.54.0","2.53.7","2.53.6","2.53.5","2.53.4","2.53.3","2.53.2","2.53.1","2.52.0","2.51.5","2.51.4","2.51.3","2.51.2","2.51.1","2.51.0","2.50.1","2.50.0","2.49.7","2.49.6","2.49.5","2.49.4","2.49.3","2.49.2","2.49.1","2.48.0","2.47.92","2.47.6","2.47.5","2.47.4","2.47.3","2.47.2","2.47.1","2.46.0","2.45.8","2.45.7","2.45.6","2.45.5","2.45.4","2.45.3","2.45.2","2.45.1","2.43.92","2.43.91","2.43.90","2.43.4","2.43.3","2.43.2","2.43.1","2.43.0","2.42.0","2.41.5","2.41.4","2.41.3","2.41.2","2.41.1","2.39.92","2.39.91","2.39.90","2.39.4","2.39.3","2.39.2","2.39.1","2.39.0","2.38.0","2.37.93","2.37.92","2.37.7","2.37.6","2.37.5","2.37.4","2.37.3","2.37.2","2.37.1","2.37.0","2.36.0","2.35.9","2.35.8","2.35.7","2.35.6","2.35.4","2.35.3","2.35.2","2.35.1","2.34.0","2.33.14","2.33.12","2.33.10","2.33.8","2.33.6","2.33.4","2.33.3","2.33.2","2.33.1","2.32.1","2.32.0","2.31.22","2.31.20","2.31.18","2.31.16","2.31.14","2.31.12","2.31.10","2.31.8","2.31.6","2.31.4","2.31.2","2.31.0","2.29.90","2.29.18","2.29.16","2.29.14","2.29.12","2.29.10","2.29.8","2.29.6","2.29.4","2.28.0","2.27.93","2.27.92","2.27.91","2.27.90","2.27.5","2.27.3","2.27.2","2.27.1","2.27.0","2.25.15","2.25.14","2.25.13","2.25.12","2.25.11","2.25.10","2.25.9","2.25.8","glib-2.25.7","2.25.6","2.25.5","2.25.4","2.24.0","2.20.0","2.25.3","2.25.2","2.25.0","2.23.6","2.23.5","2.23.4","2.23.3","2.23.2","2.23.1","2.23.0","2.22.2","2.22.0","2.21.6","2.21.5","2.21.4","2.21.3","2.21.2","2.21.1","2.20.1","GLIB_2_20_0","GLIB_2_19_10","GLIB_2_19_9","GLIB_2_19_8","GLIB_2_19_7","GLIB_2_19_6","GLIB_2_19_5","GLIB_2_19_4","GLIB_2_19_3","GLIB_2_19_2","GLIB_2_19_1","GLIB_2_19_0","GLIB_2_18_1","GLIB_2_18_0","GLIB_2_17_7","GLIB_2_17_6","GLIB_2_17_5","GLIB_2_17_4","GLIB_2_17_3","GLIB_2_17_2","GLIB_2_17_1","GLIB_2_17_0","GLIB_2_16_1","GLIB_2_15_6","GLIB_2_15_5","GLIB_2_15_4","GLIB_2_15_3","GLIB_2_15_2","GLIB_2_15_1","GLIB_2_14_3","GLIB_2_14_2","GLIB_2_14_1","GLIB_2_14_0","GLIB_2_13_7","GLIB_2_13_6","GLIB_2_13_5","GLIB_2_13_3","GLIB_2_13_2","GLIB_2_13_1","GLIB_2_13_0","glib-2-12-branchpoint","GLIB_2_12_2","GLIB_2_12_1","GLIB_2_12_0","GLIB_2_11_4","GLIB_2_11_3","GLIB_2_11_2","GLIB_2_11_1","GLIB_2_11_0","glib-2-10-branchpoint","GLIB_2_10_1","GLIB_2_10_0","GLIB_2_9_6","GLIB_2_9_5","GLIB_2_9_4","GLIB_2_9_3","GLIB_2_9_2","GLIB_2_9_1","GLIB_2_9_0","GLIB_2_8_1","GLIB_2_8_0","GLIB_2_7_7","GLIB_2_7_6","GLIB_2_7_5","GLIB_2_7_4","GTK_2_7_4","GLIB_2_7_3","GLIB_2_7_2","GLIB_2_7_1","GLIB_2_7_0","glib-2-6-branchpoint","GLIB_2_6_1","GLIB_2_6_0","GLIB_2_5_6","gobject_0_10_0","GLIB_2_5_5","GTK_2_5_4","GLIB_2_5_3","GLIB_2_5_2","GLIB_2_5_1","GLIB_2_5_0","gobject_0_9_0","glib-2-4-branchpoint","GLIB_2_4_1","GLIB_2_4_0","GLIB_2_3_6","GLIB_2_3_5","GLIB_2_3_3","GLIB_2_3_2","start","GLIB_2_3_1","GLIB_2_3_0","glib-2-2-branchpoint","GLIB_2_2_0","GLIB_2_1_5","GLIB_2_1_4","GLIB_2_1_3","R_2_0_core","glib-2-0-branchpoint","GLIB_2_0_1","GLIB_2_0_0","GLIB_2_0_0_RC1","GLIB_1_3_15","GLIB_1_3_14","GLIB_1_3_13","GLIB_1_3_12","GLIB_1_3_11","GOBJECT_GType_guint","GLIB_1_3_10","GLIB_1_3_9","GLIB_1_3_8","GLIB_1_3_7","GTK_ALL_1_3_6","GLIB_1_3_6","GLIB_1_3_5","GLIB_1_3_4","GLIB_1_3_3","GLIB_1_2_9PRE1","GLIB_1_3_2","GNOME_PRINT_0_24","GLIB_1_3_1","GLIB_1_3_0","GLIB_1_2_0","GLIB_1_1_16","GLIB_1_1_15","GLIB_1_1_14","GLIB_1_1_13","GLIB_1_1_12","GLIB_1_1_11","GLIB_1_1_10","GLIB_GNOME_0_99_1","FOR_GNOME_0_99_1","GLIB_1_1_9","GLIB_1_1_8a","GLIB_1_1_8","GLIB_1_1_7","GLIB_1_1_6","PRE_CLEANUP","GLIB_1_1_5","GLIB_1_1_4","GLIB_VERSION_1_1_3","GLIB_1_1_3a","GLIB_1_1_3","GLIB_1_1_2","GLIB_1_1_1","GLIB_1_1_0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-58013.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"}]}