A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an… (CVE-2026-58010)
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
AI Analysis
Technical Summary
CVE-2026-58010 is an off-by-one error in GLib's gvs_tuple_is_normal function within the gvariant-serialiser.c source file. The bounds check uses a > comparator instead of >=, causing a single byte out-of-bounds read during alignment padding verification. This can result in minor information disclosure of one byte and a denial of service if the out-of-bounds read crosses a memory page boundary. The issue affects GLib versions >=2.68.0 and <2.70.1. Red Hat has released an update addressing this vulnerability as part of a security advisory.
Potential Impact
The vulnerability allows an attacker to cause a denial of service or gain minor information disclosure of one byte due to an out-of-bounds read. The impact is rated medium with a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update fixing this issue is available from Red Hat as part of their advisory RHSA-2026:49512. Users should apply the official patch or update to a fixed version of GLib (version 2.70.1 or later) to remediate this vulnerability. No additional mitigation actions are required beyond applying the vendor-provided fix.
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an… (CVE-2026-58010)
Description
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
CVSS v3.1
Score 6.5medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-58010 is an off-by-one error in GLib's gvs_tuple_is_normal function within the gvariant-serialiser.c source file. The bounds check uses a > comparator instead of >=, causing a single byte out-of-bounds read during alignment padding verification. This can result in minor information disclosure of one byte and a denial of service if the out-of-bounds read crosses a memory page boundary. The issue affects GLib versions >=2.68.0 and <2.70.1. Red Hat has released an update addressing this vulnerability as part of a security advisory.
Potential Impact
The vulnerability allows an attacker to cause a denial of service or gain minor information disclosure of one byte due to an out-of-bounds read. The impact is rated medium with a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). There are no known exploits in the wild at this time.
Mitigation Recommendations
A security update fixing this issue is available from Red Hat as part of their advisory RHSA-2026:49512. Users should apply the official patch or update to a fixed version of GLib (version 2.70.1 or later) to remediate this vulnerability. No additional mitigation actions are required beyond applying the vendor-provided fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-m7rp-473c-296x
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-58010"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Patch Information
Threat ID: 6a83335dbf8831d5392a6578
Added to database: 08/17/2026, 16:14:21 UTC
Last enriched: 09/29/2026, 05:06:53 UTC
Last updated: 10/02/2026, 02:46:37 UTC
Views: 42
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.