CVE-2026-58016 is a high-severity vulnerability affecting GLib in Red Hat Enterprise Linux 10. The flaw is a state confusion issue in the g_dbus_node_info_new_for_xml() function located in gio/gdbusintrospection.c. When processing malformed D-Bus introspection XML that contains a <node> element nested within <method>, <signal>, <property>, or <arg> elements, an unsigned integer overflow can occur. This overflow leads to an out-of-bounds read, which results in a denial of service condition. The vulnerability has a CVSS 3.1 score of 7.5 with network attack vector, low attack complexity, no privileges or user interaction required, and impacts availability only.

Successful exploitation causes a denial of service by triggering an out-of-bounds read due to an unsigned integer overflow when processing malformed D-Bus introspection XML. There is no impact on confidentiality or integrity reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-58016 for current remediation guidance. No official fix or workaround is explicitly stated in the provided advisory content. Users should monitor the vendor advisory for updates and apply patches once available.