{"id":"CVE-2026-58016","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-58016","summary":"Glib: integer underflow in gio/gdbusintrospection.c via \"g_dbus_node_info_new_for_xml\"","details":"A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.","published":"2026-06-30T13:02:45.931Z","modified":"2026-08-14T18:51:39.047550395Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":{"score":0.00545,"percentile":0.42974,"asOf":"2026-08-13"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://access.redhat.com/downloads/content/package-browser/"},{"type":"WEB","url":"https://catalog.redhat.com/software/containers/"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42063"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42089"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:42090"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:44481"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:46836"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:49512"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51175"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51176"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51177"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51181"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51182"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51183"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51184"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:51185"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:53371"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-58016"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58016.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58016"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2492257"},{"type":"REPORT","url":"https://gitlab.gnome.org/GNOME/glib/-/issues/3932"},{"type":"PACKAGE","url":"https://gitlab.gnome.org/GNOME/glib/"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-14T18:51:39.047550395Z"}}