CVE-2026-58013
published 2026-06-30CVE-2026-58013: A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length…
PriorityP340high8.2CVSS 3.1
AVNACLPRNUINSUCLINAH
EPSS
0.33%
25.2th percentile
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnome | glib | < 2.88.1 | 2.88.1 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
GNOME GLib up to 2.88.0 giochannel.c g_io_channel_read_line_backend buffer over-read (ID 3925 / EUVD-2026-40315)
vuldb·2026-06-30·CVSS 6.5
CVE-2026-58013 [MEDIUM] GNOME GLib up to 2.88.0 giochannel.c g_io_channel_read_line_backend buffer over-read (ID 3925 / EUVD-2026-40315)
A vulnerability was found in GNOME GLib up to 2.88.0. It has been classified as critical. Impacted is the function g_io_channel_read_line_backend of the file giochannel.c. Performing a manipulation results in buffer over-read.
This vulnerability is identified as CVE-2026-58013. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is recommended.
GHSA
A flaw was found in GLib.
ghsa_unreviewed·2026-06-30
CVE-2026-58013 [MEDIUM] CWE-126 A flaw was found in GLib.
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
Red Hat
glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
vendor_redhat·2026-04-03·CVSS 6.5
CVE-2026-58013 [MEDIUM] CWE-126 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
Statement: Any applications calling g_io_channel_set_line_term() with a multi-byte line terminator (length greater than one) and subsequently calling g_io_channel_read_line_backend() are vulnerable to this issue. This flaw can cause a buffer over-read of 8 bytes, leading to an information disclosure of 7 bytes or a denial of service when
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-58013 mingw-glib2: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58013 [MEDIUM] CVE-2026-58013 mingw-glib2: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
CVE-2026-58013 mingw-glib2: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A heap-buffer-overflow READ occurs in g_io_channel_read_line_backend() at giochannel.c:1831 when a custom line terminator of length > 1 is set via g_io_channel_set_line_term(). The memcmp call reads line_term_len bytes from nextchar, but the loop condition nextchar < lastchar only guarantees 1 byte is available. When nextchar is within line_term_len - 1 bytes of lastchar, memcmp reads past the GString buffer into ASan redzone / unallocated memory.
Bugzilla
CVE-2026-58013 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58013 [MEDIUM] CVE-2026-58013 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
CVE-2026-58013 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A heap-buffer-overflow READ occurs in g_io_channel_read_line_backend() at giochannel.c:1831 when a custom line terminator of length > 1 is set via g_io_channel_set_line_term(). The memcmp call reads line_term_len bytes from nextchar, but the loop condition nextchar < lastchar only guarantees 1 byte is available. When nextchar is within line_term_len - 1 bytes of lastchar, memcmp reads past the GString buffer into ASan redzone / unallocated memory.
Discussion:
Bugzilla
CVE-2026-58013 glib2: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
bugzilla·2026-06-30·CVSS 6.5
CVE-2026-58013 [MEDIUM] CVE-2026-58013 glib2: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
CVE-2026-58013 glib2: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A heap-buffer-overflow READ occurs in g_io_channel_read_line_backend() at giochannel.c:1831 when a custom line terminator of length > 1 is set via g_io_channel_set_line_term(). The memcmp call reads line_term_len bytes from nextchar, but the loop condition nextchar < lastchar only guarantees 1 byte is available. When nextchar is within line_term_len - 1 bytes of lastchar, memcmp reads past the GString buffer into ASan redzone / unallocated memory.
Bugzilla
CVE-2026-58013 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
bugzilla·2026-06-24·CVSS 6.5
CVE-2026-58013 [MEDIUM] CVE-2026-58013 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
CVE-2026-58013 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A heap-buffer-overflow READ occurs in g_io_channel_read_line_backend() at giochannel.c:1831 when a custom line terminator of length > 1 is set via g_io_channel_set_line_term(). The memcmp call reads line_term_len bytes from nextchar, but the loop condition nextchar < lastchar only guarantees 1 byte is available. When nextchar is within line_term_len - 1 bytes of lastchar, memcmp reads past the GString buffer into ASan redzone / unallocated memory.
2026-06-30
Published