Threats Tagged 'cve-2026-16118'

A stack buffer overflow vulnerability (CVE-2025-6170) exists in the libxml2 library's xmllint interactive shell command handling on Red Hat Enterprise Linux 8 and related products. Red Hat has rated the security impact as low. A security update is available that addresses this vulnerability by updating the libxml2 package. No known exploits are reported in the wild.

Red Hat Cost Management On-Premise provides cost visibility and analysis for on-premise OpenShift environments. This update includes the latest bug fixes and enhancements.

A security update has been issued for Red Hat Update Infrastructure (RHUI) container images, addressing vulnerabilities including CVE-2026-13221. The update involves multiple RPM packages related to Perl and Red Hat Hardened Images. The advisory indicates a high severity level but does not provide detailed technical specifics or CVSS scores. The update is intended to mitigate security issues in affected versions of RHUI.

A heap-based buffer overflow vulnerability exists in the xdgmime component of glib2, specifically in the _xdg_mime_magic_parse_magic_line() function on little-endian systems. This flaw can be triggered when an attacker-controlled MIME magic file located in a user-writable XDG data directory is parsed by applications performing MIME type detection, potentially causing application crashes or memory corruption. The issue affects certain versions of glib2 used in SUSE and Red Hat Enterprise Linux 10. A security update is available to address this vulnerability.

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.