This vulnerability in GLib's g_date_time_get_ymd function arises from an out-of-bounds read of 2 bytes when handling an invalid GDateTime object produced by g_date_time_add_full. The flaw can corrupt the date output and may cause logic errors that could result in a denial of service condition. The CVSS 3.1 score is 6.5 (medium severity) with network attack vector, low attack complexity, no privileges or user interaction required, and impacts integrity and availability. No patch or remediation level is currently confirmed by the vendor advisory. The affected versions are not explicitly stated.

The vulnerability can lead to corrupted date outputs and logic errors in applications using the affected GLib functions, potentially causing denial of service. There is no indication of confidentiality or direct code execution impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58011 for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No vendor advisory states that no action is required or that the issue is already mitigated.