What’s Vulnerable › Vulnerabilities

CVE-2026-58012: Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

Description

A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.

Affected products

How to fix

Upgrade to a fixed version: GNOME GLib 2.86.5; GNOME GLib 2.86.5, 2.88.1; Red Hat Cert Manager support for Red Hat OpenShift release 1.17 1791371080; Red Hat Cert Manager support for Red Hat OpenShift release 1.18 1791459707; Red Hat Cert Manager support for Red Hat OpenShift release 1.19 1788348522; Red Hat Cert Manager support for Red Hat OpenShift release 1.20 1790223279; Red Hat AI Inference Server 3.2 1790621714; Red Hat AI Inference Server 3.5 1791425869; Red Hat Discovery 2 1788205779; Red Hat Enterprise Linux 10 0:2.80.4-12.el10_2.21; Red Hat Enterprise Linux 10.0 Extended Update Support 0:2.80.4-4.el10_0.17; Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:2.56.1-13.el7_9.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-58012 or the next vulnerability affects your stack