This vulnerability exists in the GLib library used by Red Hat Enterprise Linux 10. When g_io_channel_read_line_backend() is called with a custom line terminator longer than one byte, the memcmp function may read past the end of the GString buffer, causing a buffer over-read. This can result in a minor information leak of 7 bytes or a denial of service if the over-read crosses a page boundary. The CVSS v3.1 score is 6.5 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality and availability. The vendor advisory does not provide explicit patch or remediation details.

The vulnerability can lead to minor information disclosure of up to 7 bytes or cause a denial of service condition if the buffer over-read crosses a page boundary. The impact is limited to confidentiality and availability with no integrity impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58013 for current remediation guidance. No official fix or workaround is explicitly stated in the provided advisory content.