A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an… (CVE-2026-58011)
A vulnerability in GLib's g_date_time_get_ymd function allows an out-of-bounds read of 2 bytes when processing an invalid GDateTime object created by g_date_time_add_full. This flaw can corrupt date output and potentially cause logic errors leading to denial of service. The issue is tracked as CVE-2026-58011 with a CVSS score of 6.5 (medium severity). Red Hat has issued security advisories providing patches for affected GLib packages in Red Hat Enterprise Linux 8 and 9. The flaw is fixed in updated package versions distributed by Red Hat.
AI Analysis
Technical Summary
CVE-2026-58011 is an out-of-bounds read vulnerability in GLib's g_date_time_get_ymd function located in glib/gdatetime.c. The flaw occurs when an invalid GDateTime object, produced by the g_date_time_add_full function, is processed, causing a read of 2 bytes beyond the intended buffer. This can corrupt the date output and may lead to logic errors that result in denial of service. The vulnerability is part of a set of GLib security issues addressed in Red Hat advisories RHSA-2026:49512 and RHSA-2026:55440. Red Hat has released patched versions of the glib2 and mingw-glib2 packages for Red Hat Enterprise Linux 8 and 9 to remediate this issue.
Potential Impact
The vulnerability does not impact confidentiality but can cause integrity loss by corrupting date output and availability loss through denial of service due to logic errors triggered by the out-of-bounds read. There are no known exploits in the wild. The CVSS 3.1 base score is 6.5, indicating medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity and availability.
Mitigation Recommendations
Official patches are available from Red Hat for affected GLib packages in Red Hat Enterprise Linux 8 and 9. Users should apply the updates provided in advisories RHSA-2026:49512 and RHSA-2026:55440 to remediate this vulnerability. No additional mitigation is required once patches are applied.
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an… (CVE-2026-58011)
Description
A vulnerability in GLib's g_date_time_get_ymd function allows an out-of-bounds read of 2 bytes when processing an invalid GDateTime object created by g_date_time_add_full. This flaw can corrupt date output and potentially cause logic errors leading to denial of service. The issue is tracked as CVE-2026-58011 with a CVSS score of 6.5 (medium severity). Red Hat has issued security advisories providing patches for affected GLib packages in Red Hat Enterprise Linux 8 and 9. The flaw is fixed in updated package versions distributed by Red Hat.
CVSS v3.1
Score 6.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-58011 is an out-of-bounds read vulnerability in GLib's g_date_time_get_ymd function located in glib/gdatetime.c. The flaw occurs when an invalid GDateTime object, produced by the g_date_time_add_full function, is processed, causing a read of 2 bytes beyond the intended buffer. This can corrupt the date output and may lead to logic errors that result in denial of service. The vulnerability is part of a set of GLib security issues addressed in Red Hat advisories RHSA-2026:49512 and RHSA-2026:55440. Red Hat has released patched versions of the glib2 and mingw-glib2 packages for Red Hat Enterprise Linux 8 and 9 to remediate this issue.
Potential Impact
The vulnerability does not impact confidentiality but can cause integrity loss by corrupting date output and availability loss through denial of service due to logic errors triggered by the out-of-bounds read. There are no known exploits in the wild. The CVSS 3.1 base score is 6.5, indicating medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity and availability.
Mitigation Recommendations
Official patches are available from Red Hat for affected GLib packages in Red Hat Enterprise Linux 8 and 9. Users should apply the updates provided in advisories RHSA-2026:49512 and RHSA-2026:55440 to remediate this vulnerability. No additional mitigation is required once patches are applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8xmh-8wfg-9f6j
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-58011"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Patch Information
Threat ID: 6a83335dbf8831d5392a6566
Added to database: 08/17/2026, 16:14:21 UTC
Last enriched: 08/17/2026, 16:30:26 UTC
Last updated: 08/18/2026, 00:41:14 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.