A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator… (CVE-2026-58013)
A buffer over-read vulnerability exists in GLib's g_io_channel_read_line_backend() function when a custom line terminator longer than one byte is used. This flaw can cause memcmp to read beyond the GString buffer, potentially leading to minor information disclosure of 7 bytes or a denial of service if the over-read crosses a memory page boundary. The vulnerability is tracked as CVE-2026-58013 with a CVSS score of 6.5 (medium severity). Red Hat has issued security advisories providing patches for affected GLib versions in Red Hat Enterprise Linux 8 and 9.
AI Analysis
Technical Summary
CVE-2026-58013 is a buffer over-read vulnerability in GLib's g_io_channel_read_line_backend() function located in giochannel.c. When a custom line terminator with length greater than one is set, the memcmp function reads past the allocated GString buffer, causing a buffer over-read. This can result in minor information disclosure of 7 bytes or a denial of service if the over-read crosses a page boundary. Red Hat advisories RHSA-2026:49512 and RHSA-2026:55440 confirm the issue and provide security updates for mingw-glib2 and glib2 packages in Red Hat Enterprise Linux 8 and 9 respectively. The advisories include instructions to apply updates to remediate the vulnerability.
Potential Impact
The vulnerability allows an attacker to cause a minor information disclosure of 7 bytes or trigger a denial of service condition by causing a buffer over-read in GLib. The impact is rated medium with a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, limited confidentiality impact, no integrity impact, and low availability impact.
Mitigation Recommendations
Official patches are available from Red Hat for affected GLib packages in Red Hat Enterprise Linux 8 and 9. Users should apply the security updates referenced in Red Hat advisories RHSA-2026:49512 and RHSA-2026:55440 to remediate this vulnerability. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigations are specified or required beyond applying the vendor-provided fixes.
A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator… (CVE-2026-58013)
Description
A buffer over-read vulnerability exists in GLib's g_io_channel_read_line_backend() function when a custom line terminator longer than one byte is used. This flaw can cause memcmp to read beyond the GString buffer, potentially leading to minor information disclosure of 7 bytes or a denial of service if the over-read crosses a memory page boundary. The vulnerability is tracked as CVE-2026-58013 with a CVSS score of 6.5 (medium severity). Red Hat has issued security advisories providing patches for affected GLib versions in Red Hat Enterprise Linux 8 and 9.
CVSS v3.1
Score 6.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-58013 is a buffer over-read vulnerability in GLib's g_io_channel_read_line_backend() function located in giochannel.c. When a custom line terminator with length greater than one is set, the memcmp function reads past the allocated GString buffer, causing a buffer over-read. This can result in minor information disclosure of 7 bytes or a denial of service if the over-read crosses a page boundary. Red Hat advisories RHSA-2026:49512 and RHSA-2026:55440 confirm the issue and provide security updates for mingw-glib2 and glib2 packages in Red Hat Enterprise Linux 8 and 9 respectively. The advisories include instructions to apply updates to remediate the vulnerability.
Potential Impact
The vulnerability allows an attacker to cause a minor information disclosure of 7 bytes or trigger a denial of service condition by causing a buffer over-read in GLib. The impact is rated medium with a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, limited confidentiality impact, no integrity impact, and low availability impact.
Mitigation Recommendations
Official patches are available from Red Hat for affected GLib packages in Red Hat Enterprise Linux 8 and 9. Users should apply the security updates referenced in Red Hat advisories RHSA-2026:49512 and RHSA-2026:55440 to remediate this vulnerability. Refer to https://access.redhat.com/articles/11258 for detailed update instructions. No additional mitigations are specified or required beyond applying the vendor-provided fixes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-4x46-h598-64qr
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-58013"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Patch Information
Threat ID: 6a83335dbf8831d5392a656f
Added to database: 08/17/2026, 16:14:21 UTC
Last enriched: 08/17/2026, 16:30:34 UTC
Last updated: 08/18/2026, 00:41:14 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.