Yüksek CVSS 8.2

CVE-2026-58012: Glib: güvenlik açığı

Yayın: 30 Haziran 2026 16:19 · Güncelleme: 6 Kasım 2026 11:30

Açıklama (NVD)

A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.

Özet bilgiler

Ürün: Gnome Glib
CVSS v3.1: 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS: %0,49 (yüzdelik 42)
CWE: CWE-126
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
gnome-glib	—	—	2.86.5
gnome-glib	2.88.0	2.88.0	—
redhat-enterprise-linux	6.0	6.0	—
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları