GNOME Vulnerabilities and Affected Products
Vulnerabilities associated with GLib.
Products
Clear product- GLib10 vulnerabilities
- libsoup5 vulnerabilities
- Gdk-Pixbuf3 vulnerabilities
- GIMP3 vulnerabilities
- libxml23 vulnerabilities
- Evolution Data Server2 vulnerabilities
- libgsf2 vulnerabilities
- Ekiga1 vulnerability
- Epiphany1 vulnerability
- Evolution1 vulnerability
- Fonts Viewer1 vulnerability
- gdkpixbuf1 vulnerability
- gdm1 vulnerability
- GDM31 vulnerability
- glade1 vulnerability
- gnome-remote-desktop1 vulnerability
- gnome-shell1 vulnerability
- gvdb1 vulnerability
- librest1 vulnerability
- libxslt1 vulnerability
- malcontent1 vulnerability
- NetworkManager1 vulnerability
- Pango1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-58016HIGH | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. CWE-191Jun 30, 2026 | CVSS7.5v3.1 | EPSS0.545% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58015MEDIUM | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveA flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context parameter received from the server. A malicious D-Bus server can supply a cookie_context containing path traversal sequences, causing the client to read an arbitrary file and exfiltrate sensitive data by verifying guessed file contents against a generated hash. CWE-22Jun 30, 2026 | CVSS5.9v3.1 | EPSS0.479% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58014HIGH | Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary. CWE-193Jun 30, 2026 | CVSS7.3v3.1 | EPSS0.321% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58013MEDIUM | Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary. CWE-126Jun 30, 2026 | CVSS6.5v3.1 | EPSS0.371% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58012MEDIUM | Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary. CWE-126Jun 30, 2026 | CVSS6.5v3.1 | EPSS0.363% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58011MEDIUM | Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeA flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service. CWE-125Jun 30, 2026 | CVSS6.5v3.1 | EPSS0.36% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58010MEDIUM | Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary. CWE-126Jun 30, 2026 | CVSS6.5v3.1 | EPSS0.363% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-14512MEDIUM | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflowA flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values. CWE-190Dec 11, 2025 | CVSS6.5v3.1 | EPSS0.587% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-14087MEDIUM | Glib: glib: buffer underflow in gvariant parser leads to heap corruptionA flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings. CWE-190Dec 10, 2025 | CVSS5.6v3.1 | EPSS0.839% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-52533CRITICAL | gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character. CWE-120Nov 11, 2024 | CVSS9.8v3.1 | EPSS1.26% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |