CVE-2026-58011
published 2026-06-30CVE-2026-58011: A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid…
PriorityP339high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.47%
40.7th percentile
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnome | glib | < 2.88.1 | 2.88.1 |
| gnome | glib | < 2.86.5 | 2.86.5 |
| gnome | glib | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| ubuntu | glib2.0 | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat6.5MEDIUM
vendor_ubuntu5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
GLib vulnerabilities
vendor_ubuntu·2026-09-21·CVSS 5.3
CVE-2026-58013 [MEDIUM] GLib vulnerabilities
Title: GLib vulnerabilities
Summary: GLib could be made to crash or expose sensitive information if it
received specially crafted input.
It was discovered that GLib's GDBus authentication mechanism failed to
enforce length limitations on data lines read from a client. An
unauthenticated attacker could exploit this to cause a denial of service
via resource exhaustion. (CVE-2026-15588)
It was discovered that the xdgmime library in GLib had a heap-based
buffer overflow. An attacker-controlled MIME magic file could cause an
out-of-bounds write on little-endian systems. (CVE-2026-16118)
It was discovered that GLib had an off-by-one error in the GVariant
serialiser. An attacker could use this to cause an out-of-bounds read,
leading to information disclosure or a denial of service.
(CVE-2026-
Red Hat
glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
vendor_redhat·2026-03-27·CVSS 6.5
CVE-2026-58011 [MEDIUM] CWE-125 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
Statement: Any applications that allow a user to submit a date to `g_date_time_add_full()` and later call any getter functions, such as `g_date_time_get_month()` or `g_date_time_get_year()`, with the returned GDateTime object are vulnerable to this issue. This flaw can cause an out-of-bounds read of only 2 bytes, leading to a denial of service due to logic errors th
GHSA
A flaw was found in GLib.
ghsa_unreviewed·2026-06-30
CVE-2026-58011 [MEDIUM] CWE-125 A flaw was found in GLib.
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
VulDB
GNOME GLib prior 2.86.5/2.88.1 glib/gdatetime.c g_date_time_get_ymd out-of-bounds (ID 3917 / EUVD-2026-40313)
vuldb·2026-06-30·CVSS 6.5
CVE-2026-58011 [MEDIUM] GNOME GLib prior 2.86.5/2.88.1 glib/gdatetime.c g_date_time_get_ymd out-of-bounds (ID 3917 / EUVD-2026-40313)
A vulnerability classified as critical was found in GNOME GLib. This vulnerability affects the function g_date_time_get_ymd of the file glib/gdatetime.c. The manipulation results in out-of-bounds read.
This vulnerability is known as CVE-2026-58011. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-58011 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58011 [MEDIUM] CVE-2026-58011 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
CVE-2026-58011 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A global-buffer-overflow (out-of-bounds read) exists in GLib's g_date_time_get_ymd() function, triggered when operating on an invalid GDateTime object produced by g_date_time_add_full(). The g_date_time_add_full() function does not validate that the resulting date falls within the supported range (years 1–9999), allowing construction of a GDateTime with a negative or zero days field. When any getter function (e.g., g_date_time_get_month(), g_date_time_get
Bugzilla
CVE-2026-58011 glib2: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58011 [MEDIUM] CVE-2026-58011 glib2: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
CVE-2026-58011 glib2: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A global-buffer-overflow (out-of-bounds read) exists in GLib's g_date_time_get_ymd() function, triggered when operating on an invalid GDateTime object produced by g_date_time_add_full(). The g_date_time_add_full() function does not validate that the resulting date falls within the supported range (years 1–9999), allowing construction of a GDateTime with a negative or zero days field. When any getter function (e.g., g_date_time_get_month(), g_date_time_ge
Bugzilla
CVE-2026-58011 mingw-glib2: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58011 [MEDIUM] CVE-2026-58011 mingw-glib2: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
CVE-2026-58011 mingw-glib2: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A global-buffer-overflow (out-of-bounds read) exists in GLib's g_date_time_get_ymd() function, triggered when operating on an invalid GDateTime object produced by g_date_time_add_full(). The g_date_time_add_full() function does not validate that the resulting date falls within the supported range (years 1–9999), allowing construction of a GDateTime with a negative or zero days field. When any getter function (e.g., g_date_time_get_month(), g_date_t
Bugzilla
CVE-2026-58011 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
bugzilla·2026-06-24·CVSS 6.5
CVE-2026-58011 [MEDIUM] CVE-2026-58011 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
CVE-2026-58011 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
A global-buffer-overflow (out-of-bounds read) exists in GLib's g_date_time_get_ymd() function, triggered when operating on an invalid GDateTime object produced by g_date_time_add_full(). The g_date_time_add_full() function does not validate that the resulting date falls within the supported range (years 1–9999), allowing construction of a GDateTime with a negative or zero days field. When any getter function (e.g., g_date_time_get_month(), g_date_time_get_year()) is subsequently called, the internal g_date_time_get_ymd() routine computes a negative array index, causing a 2-byte OOB read from adjacent global data.
https://access.redhat.com/errata/RHSA-2026:49512https://access.redhat.com/errata/RHSA-2026:55440https://access.redhat.com/errata/RHSA-2026:57015https://access.redhat.com/errata/RHSA-2026:58981https://access.redhat.com/errata/RHSA-2026:61766https://access.redhat.com/errata/RHSA-2026:61783https://access.redhat.com/errata/RHSA-2026:63135https://access.redhat.com/errata/RHSA-2026:63138https://access.redhat.com/errata/RHSA-2026:63140https://access.redhat.com/errata/RHSA-2026:65762https://access.redhat.com/errata/RHSA-2026:65763https://access.redhat.com/errata/RHSA-2026:65767https://access.redhat.com/errata/RHSA-2026:65768https://access.redhat.com/errata/RHSA-2026:65769https://access.redhat.com/errata/RHSA-2026:65770https://access.redhat.com/errata/RHSA-2026:65771https://access.redhat.com/errata/RHSA-2026:65773https://access.redhat.com/errata/RHSA-2026:66018https://access.redhat.com/errata/RHSA-2026:72394https://access.redhat.com/errata/RHSA-2026:72395https://access.redhat.com/errata/RHSA-2026:72399https://access.redhat.com/errata/RHSA-2026:72470https://access.redhat.com/errata/RHSA-2026:72475https://access.redhat.com/errata/RHSA-2026:72476https://access.redhat.com/errata/RHSA-2026:72502https://access.redhat.com/errata/RHSA-2026:73859https://access.redhat.com/errata/RHSA-2026:73909https://access.redhat.com/errata/RHSA-2026:73929https://access.redhat.com/errata/RHSA-2026:73930https://access.redhat.com/errata/RHSA-2026:73959https://access.redhat.com/errata/RHSA-2026:73960https://access.redhat.com/errata/RHSA-2026:73961https://access.redhat.com/errata/RHSA-2026:73962https://access.redhat.com/errata/RHSA-2026:74458https://access.redhat.com/errata/RHSA-2026:74459https://access.redhat.com/errata/RHSA-2026:74460https://access.redhat.com/errata/RHSA-2026:74461https://access.redhat.com/errata/RHSA-2026:74462https://access.redhat.com/errata/RHSA-2026:74463https://access.redhat.com/errata/RHSA-2026:74674https://access.redhat.com/errata/RHSA-2026:74677https://access.redhat.com/errata/RHSA-2026:74678https://access.redhat.com/errata/RHSA-2026:74679https://access.redhat.com/errata/RHSA-2026:74681https://access.redhat.com/errata/RHSA-2026:74683https://access.redhat.com/errata/RHSA-2026:74685https://access.redhat.com/errata/RHSA-2026:74687https://access.redhat.com/errata/RHSA-2026:74688https://access.redhat.com/errata/RHSA-2026:74771https://access.redhat.com/errata/RHSA-2026:75652https://access.redhat.com/errata/RHSA-2026:75654https://access.redhat.com/errata/RHSA-2026:75655https://access.redhat.com/errata/RHSA-2026:75657https://access.redhat.com/errata/RHSA-2026:75658https://access.redhat.com/errata/RHSA-2026:75659https://access.redhat.com/errata/RHSA-2026:75660https://access.redhat.com/errata/RHSA-2026:76042https://access.redhat.com/errata/RHSA-2026:80769https://access.redhat.com/errata/RHSA-2026:80771https://access.redhat.com/errata/RHSA-2026:82059https://access.redhat.com/errata/RHSA-2026:82061https://access.redhat.com/errata/RHSA-2026:82066https://access.redhat.com/errata/RHSA-2026:82304https://access.redhat.com/errata/RHSA-2026:82322https://access.redhat.com/errata/RHSA-2026:82336https://access.redhat.com/errata/RHSA-2026:82347https://access.redhat.com/errata/RHSA-2026:82354https://access.redhat.com/errata/RHSA-2026:82368https://access.redhat.com/errata/RHSA-2026:82371https://access.redhat.com/errata/RHSA-2026:82372https://access.redhat.com/errata/RHSA-2026:82415https://access.redhat.com/errata/RHSA-2026:82857https://access.redhat.com/errata/RHSA-2026:82888https://access.redhat.com/security/cve/CVE-2026-58011https://bugzilla.redhat.com/show_bug.cgi?id=2492245https://gitlab.gnome.org/GNOME/glib/-/issues/3917https://gitlab.gnome.org/GNOME/glib/-/work_items/3917
2026-06-30
Published