CVE-2026-58010: Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

Severity: high (CVSS 8.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-06-30 · updated 2026-10-29
Weakness: CWE-126

Description

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.

Affected products

GNOME GLib: before 2.86.5; 2.88.0 (and their updates) — fixed in 2.86.5
Red Hat Enterprise Linux: 6.0, 7.0, 8.0, 9.0, 10.0 (and their updates)
GNOME GLib: before 2.86.5; before 2.88.1 — fixed in 2.86.5, 2.88.1
Red Hat Cert Manager support for Red Hat OpenShift release 1.17: all versions — fixed in 1791371080
Red Hat Cert Manager support for Red Hat OpenShift release 1.18: all versions — fixed in 1791459707
Red Hat Cert Manager support for Red Hat OpenShift release 1.19: all versions — fixed in 1788348522
Red Hat Cert Manager support for Red Hat OpenShift release 1.20: all versions — fixed in 1790223279
Red Hat AI Inference Server 3.2: all versions — fixed in 1790621714
Red Hat AI Inference Server 3.5: all versions — fixed in 1791425869
Red Hat Discovery 2: all versions — fixed in 1788205779
Red Hat Enterprise Linux 10: all versions — fixed in 0:2.80.4-12.el10_2.21
Red Hat Enterprise Linux 10.0 Extended Update Support: all versions — fixed in 0:2.80.4-4.el10_0.17
Red Hat Enterprise Linux 6: all versions
Red Hat Enterprise Linux 7 Extended Lifecycle Support: all versions — fixed in 0:2.56.1-13.el7_9.1
Red Hat Enterprise Linux 8: all versions — fixed in 0:2.70.1-9.el8_10
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: all versions — fixed in 0:2.56.4-10.el8_4.7
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: all versions — fixed in 0:2.56.4-10.el8_4.7
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: all versions — fixed in 0:2.56.4-158.el8_6.7
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: all versions — fixed in 0:2.56.4-158.el8_6.7
Red Hat Enterprise Linux 8.8 Telecommunications Update Service: all versions — fixed in 0:2.56.4-165.el8_8.2
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: all versions — fixed in 0:2.56.4-165.el8_8.2
Red Hat Enterprise Linux 9: all versions — fixed in 0:2.68.4-19.el9_8.9
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: all versions — fixed in 0:2.68.4-7.el9_2.7
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: all versions — fixed in 0:2.68.4-14.el9_4.8
Red Hat Enterprise Linux 9.6 Extended Update Support: all versions — fixed in 0:2.68.4-16.el9_6.7
Red Hat Enterprise Linux AI 3.5: all versions — fixed in 1793206758
Red Hat OpenShift AI 3.0: all versions — fixed in 1790276886
Red Hat OpenShift AI 3.2: all versions — fixed in 1790703497
Red Hat OpenShift AI 3.4: all versions — fixed in 1790703542
Red Hat OpenShift AI 3.5: all versions — fixed in 1790703552

How to fix

Upgrade to a fixed version: GNOME GLib 2.86.5; GNOME GLib 2.86.5, 2.88.1; Red Hat Cert Manager support for Red Hat OpenShift release 1.17 1791371080; Red Hat Cert Manager support for Red Hat OpenShift release 1.18 1791459707; Red Hat Cert Manager support for Red Hat OpenShift release 1.19 1788348522; Red Hat Cert Manager support for Red Hat OpenShift release 1.20 1790223279; Red Hat AI Inference Server 3.2 1790621714; Red Hat AI Inference Server 3.5 1791425869; Red Hat Discovery 2 1788205779; Red Hat Enterprise Linux 10 0:2.80.4-12.el10_2.21; Red Hat Enterprise Linux 10.0 Extended Update Support 0:2.80.4-4.el10_0.17; Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:2.56.1-13.el7_9.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-58010 or the next vulnerability affects your stack