CVE-2026-58014
published 2026-06-30CVE-2026-58014: A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with…
PriorityP346high8.6CVSS 3.1
AVNACLPRNUINSUCLILAH
EPSS
0.29%
21.2th percentile
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnome | glib | < 2.88.1 | 2.88.1 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.18.6HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
vendor_redhat7.3HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
vendor_redhat·2026-04-07·CVSS 7.3
CVE-2026-58014 [HIGH] CWE-193 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
Statement: Any applications loading or parsing untrusted key files, typically .desktop or .ini files, are vulnerable to this issue. This flaw can cause an off-by-one error, leading to an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.
Mitigation: To mitigate this vu
GHSA
A flaw was found in GLib.
ghsa_unreviewed·2026-06-30
CVE-2026-58014 [HIGH] CWE-193 A flaw was found in GLib.
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
VulDB
GNOME GLib up to 2.88.0 gkeyfile.c g_key_file_get_locale_string_list off-by-one (ID 3930 / EUVD-2026-40316)
vuldb·2026-06-30·CVSS 7.3
CVE-2026-58014 [HIGH] GNOME GLib up to 2.88.0 gkeyfile.c g_key_file_get_locale_string_list off-by-one (ID 3930 / EUVD-2026-40316)
A vulnerability labeled as critical has been found in GNOME GLib up to 2.88.0. This affects the function g_key_file_get_locale_string_list of the file gkeyfile.c. Executing a manipulation can lead to off-by-one.
This vulnerability is registered as CVE-2026-58014. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-58014 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
bugzilla·2026-06-30·CVSS 7.3
CVE-2026-58014 [HIGH] CVE-2026-58014 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
CVE-2026-58014 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A heap-buffer-overflow READ of 1 byte occurs in g_key_file_get_locale_string_list() at gkeyfile.c:2464 when the resolved locale string value is an empty string (""). The function computes len = strlen(value) which yields 0, then accesses value[len - 1]. Since len is gsize(unsigned), len - 1 wraps to SIZE_MAX, causing a read of 1 byte before the heap allocation (under-read). Any application that loads a key file from untrusted input and calls g_key_file_get_loc
Bugzilla
CVE-2026-58014 glib2: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
bugzilla·2026-06-30·CVSS 7.3
CVE-2026-58014 [HIGH] CVE-2026-58014 glib2: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
CVE-2026-58014 glib2: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A heap-buffer-overflow READ of 1 byte occurs in g_key_file_get_locale_string_list() at gkeyfile.c:2464 when the resolved locale string value is an empty string (""). The function computes len = strlen(value) which yields 0, then accesses value[len - 1]. Since len is gsize(unsigned), len - 1 wraps to SIZE_MAX, causing a read of 1 byte before the heap allocation (under-read). Any application that loads a key file from untrusted input and calls g_key_file_get_lo
Bugzilla
CVE-2026-58014 mingw-glib2: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
bugzilla·2026-06-30·CVSS 7.3
CVE-2026-58014 [HIGH] CVE-2026-58014 mingw-glib2: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
CVE-2026-58014 mingw-glib2: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
A heap-buffer-overflow READ of 1 byte occurs in g_key_file_get_locale_string_list() at gkeyfile.c:2464 when the resolved locale string value is an empty string (""). The function computes len = strlen(value) which yields 0, then accesses value[len - 1]. Since len is gsize(unsigned), len - 1 wraps to SIZE_MAX, causing a read of 1 byte before the heap allocation (under-read). Any application that loads a key file from untrusted input and calls g_key_file_
Bugzilla
CVE-2026-58014 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
bugzilla·2026-06-24·CVSS 7.3
CVE-2026-58014 [HIGH] CVE-2026-58014 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
CVE-2026-58014 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
A heap-buffer-overflow READ of 1 byte occurs in g_key_file_get_locale_string_list() at gkeyfile.c:2464 when the resolved locale string value is an empty string (""). The function computes len = strlen(value) which yields 0, then accesses value[len - 1]. Since len is gsize(unsigned), len - 1 wraps to SIZE_MAX, causing a read of 1 byte before the heap allocation (under-read). Any application that loads a key file from untrusted input and calls g_key_file_get_locale_string_list() on a key whose value is empty is affected. The key file format is commonly used for .desktop files and application configuration.
2026-06-30
Published