CVE-2026-58010
published 2026-06-30CVE-2026-58010: A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment…
PriorityP341high8.2CVSS 3.1
AVNACLPRNUINSUCLINAH
EPSS
0.32%
24.2th percentile
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnome | glib | < 2.88.1 | 2.88.1 |
| gnome | glib | < 2.86.5 | 2.86.5 |
| gnome | glib | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
vendor_redhat·2026-03-26·CVSS 6.5
CVE-2026-58010 [MEDIUM] CWE-126 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
Statement: Any applications calling the `g_variant_is_normal_form()`, `g_variant_get_normal_form()` or `g_variant_byteswap()` functions that process untrusted GVariant data received from D-Bus, network or file are vulnerable to this issue. This flaw can cause an out-of-bounds read of only 1 byte, leading to an inform
VulDB
GNOME GLib up to 2.86.4/2.88.0 gvariant-serialiser.c gvs_tuple_is_normal buffer over-read (ID 3915)
vuldb·2026-06-30·CVSS 6.5
CVE-2026-58010 [MEDIUM] GNOME GLib up to 2.86.4/2.88.0 gvariant-serialiser.c gvs_tuple_is_normal buffer over-read (ID 3915)
A vulnerability has been found in GNOME GLib up to 2.86.4/2.88.0 and classified as critical. This vulnerability affects the function gvs_tuple_is_normal of the file glib/gvariant-serialiser.c. This manipulation causes buffer over-read.
The identification of this vulnerability is CVE-2026-58010. It is possible to initiate the attack remotely. There is no exploit available.
The affected component should be upgraded.
GHSA
A flaw was found in GLib.
ghsa_unreviewed·2026-06-30
CVE-2026-58010 [MEDIUM] CWE-126 A flaw was found in GLib.
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-58010 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58010 [MEDIUM] CVE-2026-58010 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
CVE-2026-58010 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
gvs_tuple_is_normal() in glib/gvariant-serialiser.c:1253 has an off-by-one error in its alignment padding check. When checking whether padding bytes are zero, the bounds check uses > instead of >=, allowing a 1-byte out-of-bounds read when offset == value.size.
Discussion:
This is a glib2 issue, not a glib issue. There is no gvariant in glib version 1.
Bugzilla
CVE-2026-58010 glib2: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58010 [MEDIUM] CVE-2026-58010 glib2: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
CVE-2026-58010 glib2: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
gvs_tuple_is_normal() in glib/gvariant-serialiser.c:1253 has an off-by-one error in its alignment padding check. When checking whether padding bytes are zero, the bounds check uses > instead of >=, allowing a 1-byte out-of-bounds read when offset == value.size.
Bugzilla
CVE-2026-58010 mingw-glib2: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58010 [MEDIUM] CVE-2026-58010 mingw-glib2: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
CVE-2026-58010 mingw-glib2: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
gvs_tuple_is_normal() in glib/gvariant-serialiser.c:1253 has an off-by-one error in its alignment padding check. When checking whether padding bytes are zero, the bounds check uses > instead of >=, allowing a 1-byte out-of-bounds read when offset == value.size.
Bugzilla
CVE-2026-58010 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
bugzilla·2026-06-24·CVSS 6.5
CVE-2026-58010 [MEDIUM] CVE-2026-58010 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
CVE-2026-58010 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
gvs_tuple_is_normal() in glib/gvariant-serialiser.c:1253 has an off-by-one error in its alignment padding check. When checking whether padding bytes are zero, the bounds check uses > instead of >=, allowing a 1-byte out-of-bounds read when offset == value.size.
2026-06-30
Published