CVE-2026-58011 — glib
MEDIUMCVE-2026-58011 is a medium-severity (CVSS 6.5) Out-of-bounds Read vulnerability. A fix is available — see the affected versions and patch details below.
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Exploitation Status
Proof-of-concept exploit code exists
- CISA’s SSVC triage found public proof-of-concept exploit code for this CVE, though no confirmed active exploitation.
- CISA assesses this as automatable — exploitation doesn’t require manual, per-target effort, which raises the odds of mass scanning and opportunistic attacks.
Exploitation and automatability from CISA’s SSVC triage for CVE-2026-58011.
EPSS Exploitation Probability
Probability of exploitation in the next 30 days, from FIRST.org EPSS.
How urgent is this, really
CVE-2026-58011 by exploitation likelihood (EPSS) against impact (CVSS). Outside the shaded patch-first corner.
Where this sits among everything scored
Of 385,738 CVEs with a current EPSS score, this one falls in the < 10% band (highlighted). Counts from FIRST.org, log-scaled.
Description
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.
Affected Products
glibgnomeenterprise linuxredhatDetection & mitigation playbook
VulnerabilityDetect
Identify every host running the affected component and compare the installed build against the fixed version below — for source-built or distro-packaged software the version string, not a lockfile, is the source of truth (`dpkg -l`, `rpm -q`, or the binary's own `--version`).
Fix
Upgrade the affected component to the fixed release for CVE-2026-58011, or apply your distribution's backported patch — distro builds are often patched at an older version number, so check your vendor's advisory rather than the upstream version alone.
Workarounds
Constrain what reaches the vulnerable code: limit the size and shape of untrusted input, isolate the affected component in a sandboxed or least-privileged process, and enable the platform's memory-safety mitigations (ASLR, stack protector, hardened allocator) so an out-of-bounds access is more likely to fail closed than to be exploitable.
Fixing This On Your OS
If you run this on a Linux distribution, patch through your package manager against the distro's own security advisory below — it tracks the exact backported fix for your release, which can ship on a different timeline (and sometimes a different severity) than the upstream project.
Any applications that allow a user to submit a date to `g_date_time_add_full()` and later call any getter functions, such as `g_date_time_get_month()` or `g_date_time_get_year()`, with the returned GDateTime object are vulnerable to this issue. This flaw can cause an out-of-bounds read of only 2 bytes, leading to a…
To mitigate this vulnerability, in applications processing user-supplied dates, implement input validation to ensure the supplied date is within the supported range before calling g_date_time_add_full() with untrusted data, specifically rejecting inputs that result in a negative or zero days field.Source: Red Hat security advisory for CVE-2026-58011 (CC BY 4.0)
| Product | Fixed in | Advisory |
|---|---|---|
| Red Hat Enterprise Linux 10 | glib2-0:2.80.4-12.el10_2.21 | RHSA-2026:57015 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | glib2-0:2.80.4-4.el10_0.17 | RHSA-2026:65767 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | glib2-0:2.56.1-13.el7_9.1 | RHSA-2026:65773 |
| Red Hat Enterprise Linux 8 | mingw-glib2-0:2.70.1-9.el8_10 | RHSA-2026:49512 |
| Red Hat Enterprise Linux 8 | glib2-0:2.56.4-177.el8_10 | RHSA-2026:61766 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | glib2-0:2.56.4-10.el8_4.7 | RHSA-2026:65762 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | glib2-0:2.56.4-158.el8_6.7 | RHSA-2026:65769 |
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service | glib2-0:2.56.4-165.el8_8.2 | RHSA-2026:65771 |
Frequently Asked Questions
Is CVE-2026-58011 in your dependencies?
Find it across , including transitive dependencies.