← Vulnerability feed

Vulnerability record · CVE-2026-58016 · published 30 June 2026

CVE-2026-58016: Gnome glib vulnerability

Gnome · Glib

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

9.1 CVSS 3.1 Critical EPSS 0.56% · top 53.0% CWE-191 · CWE-191
9.1CVSS 3.1 base score
0.56%EPSS exploitation probability, 30 days
NoNot in CISA KEV
14Affected product versions listed by NVD
47References, 1 tagged exploit
10 Nov 2026Last modified by NVD

Description

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

14 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://access.redhat.com/errata/RHSA-2026:42063 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42089 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42090 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:44481 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46836 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49512 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51175 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51176 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51177 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51181 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51182 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51183 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51184 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51185 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:53371 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:58981 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72394 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72395 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72399 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72470 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72475 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72476 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72502 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73909 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73959 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73960 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73961 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73962 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74458 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74459 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74460 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74461 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74462 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74463 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74674 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82304 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82322 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82336 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82347 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82354 Vendor Advisory

Track CVE-2026-58016 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-8720WebKit memory corruption allows code execution via crafted web contentWebKit contains multiple memory corruption issues in memory handling that are triggered when processing maliciously crafted web content. Successful e…KEVEPSS 1.6%analysed7.8CVE-2023-4911GNU C Library ld.so GLIBC_TUNABLES heap buffer overflowThe GNU C Library dynamic loader ld.so mishandles the GLIBC_TUNABLES environment variable, causing a heap-based buffer overflow and out-of-bounds wri…KEVEPSS 64%analysed7.8CVE-2022-0847Linux kernel pipe buffer flaw allows local privilege escalationThe flags member of the new pipe buffer structure was not properly initialized in copy_page_to_iter_pipe and push_pipe, so it could hold stale values…KEVEPSS 93%analysed7.8CVE-2022-0492Linux kernel cgroups v1 release_agent privilege escalation and container escapeThe Linux kernel's cgroup_release_agent_write in kernel/cgroup/cgroup-v1.c mishandles authorization, letting the cgroups v1 release_agent feature be …KEVEPSS 5.5%analysed9.8CVE-2025-14087Gnome glib integer overflow vulnerabilityA flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potenti…EPSS 0.89%9.8CVE-2024-52533Gnome glib classic buffer overflow vulnerabilitygio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient f…EPSS 1.5%9.8CVE-2019-12450Gnome glib incorrect default permissions vulnerabilityfile_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progre…EPSS 2.6%9.8CVE-2018-16428Gnome glib null pointer dereference vulnerabilityIn GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference.EPSS 4.6%

Source: NIST National Vulnerability Database (record CVE-2026-58016), CISA KEV, FIRST EPSS (scores of 2026-11-11). This page is refreshed as NVD updates the record.