A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key… (CVE-2026-58014)
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
AI Analysis
Technical Summary
CVE-2026-58014 describes an off-by-one error in GLib's g_key_file_get_locale_string_list function in gkeyfile.c. When processing a key file containing an empty value, this flaw can cause a one-byte out-of-bounds access. If this access crosses a memory page boundary, it may result in a denial of service. The issue affects GLib versions prior to 2.70.1 and version 0. Red Hat has issued a security advisory (RHSA-2026:49512) providing patches to address this and related GLib vulnerabilities.
Potential Impact
The vulnerability can lead to an out-of-bounds memory access of one byte, which may cause a denial of service condition if the access crosses a page boundary. Confidentiality, integrity, and availability impacts are rated low to high respectively per the CVSS vector. There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update fixing this vulnerability is available from Red Hat as part of advisory RHSA-2026:49512. Users should apply the official patch to affected GLib versions to remediate the issue. No additional mitigation steps are required beyond applying the vendor-provided fix.
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key… (CVE-2026-58014)
Description
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
CVSS v3.1
Score 7.3high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-58014 describes an off-by-one error in GLib's g_key_file_get_locale_string_list function in gkeyfile.c. When processing a key file containing an empty value, this flaw can cause a one-byte out-of-bounds access. If this access crosses a memory page boundary, it may result in a denial of service. The issue affects GLib versions prior to 2.70.1 and version 0. Red Hat has issued a security advisory (RHSA-2026:49512) providing patches to address this and related GLib vulnerabilities.
Potential Impact
The vulnerability can lead to an out-of-bounds memory access of one byte, which may cause a denial of service condition if the access crosses a page boundary. Confidentiality, integrity, and availability impacts are rated low to high respectively per the CVSS vector. There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update fixing this vulnerability is available from Red Hat as part of advisory RHSA-2026:49512. Users should apply the official patch to affected GLib versions to remediate the issue. No additional mitigation steps are required beyond applying the vendor-provided fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h88q-m8mm-7243
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-58014"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Patch Information
Threat ID: 6a83335dbf8831d5392a6536
Added to database: 08/17/2026, 16:14:21 UTC
Last enriched: 09/29/2026, 05:06:21 UTC
Last updated: 10/02/2026, 02:46:37 UTC
Views: 38
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.