NetSight
IP …
high7.5

CVE-2026-58016

A flaw was found in GLib.

Impact

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

Affected products

VendorProductAffected versions
GnomeGlib
before 2.89.0
RedhatCert-Manager Operator
from 1.18.0 before 1.18.2
Versions 1.17.0, 1.20.0
RedhatCodeready Linux Builder
Versions 8.0, 9.0, 10.0
RedhatCodeready Linux Builder Eus
Versions 9.6, 10.0
RedhatDiscovery
Version 2.0
RedhatInsights-Proxy
Version 1.5.0
RedhatOpenshift Ai
from 3.0 before 3.0.3
from 3.2 before 3.2.3
from 3.4 before 3.4.3
RedhatUpdate Infrastructure
from 5.0 before 5.2
RedhatEnterprise Linux
Versions 6.0, 8.0, 9.0, 10.0
RedhatEnterprise Linux Aus
Versions 8.4, 8.6
RedhatEnterprise Linux Els
Version 7.0
RedhatEnterprise Linux Eus
Versions 8.4, 8.6, 9.6, 10.0

Weakness classification

CWE-191

References