A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on… (CVE-2026-16118)

CVE-2026-16118 is a heap-based buffer overflow vulnerability in the _xdg_mime_magic_parse_magic_line() function within xdgmimemagic.c of glib2. On little-endian systems, improper pointer arithmetic during byte-swapping leads to an out-of-bounds write of 2 bytes when parsing attacker-controlled MIME magic files in user-writable XDG data locations. This can result in application crashes or memory corruption. The vulnerability affects glib2 versions in Red Hat Enterprise Linux 10 and SUSE distributions as specified. Red Hat has issued a security advisory (RHSA-2026:64799) with patches to remediate this issue.

Exploitation of this vulnerability can cause application crashes or memory corruption due to out-of-bounds writes. This may lead to denial of service or potentially other undefined behavior depending on the application using glib2 for MIME type detection. No known exploits are reported in the wild at this time.

A security update fixing this vulnerability is available from Red Hat as detailed in advisory RHSA-2026:64799. Users should apply the updated glib2 packages provided by their vendor to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.