--- id: CVE-2026-58016 title: A flaw was found in GLib summary: >- A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other ele… severity: high cvss: 7.5 cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H' cwe: - CWE-191 vendor: gnome product: glib affected: - glib < 2.88.1 - enterprise_linux = 6.0 - enterprise_linux = 7.0 - enterprise_linux = 8.0 - enterprise_linux = 9.0 - enterprise_linux = 10.0 patched: - glib 2.88.1 published: '2026-06-30' updated: '2026-10-14' sourceUpdated: '2026-10-14T20:17:56.057' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-58016' references: - url: 'https://access.redhat.com/errata/RHSA-2026:42063' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:42089' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:42090' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:44481' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:46836' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:49512' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51175' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51176' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51177' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51181' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51182' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51183' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51184' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:51185' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:53371' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:58981' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:72394' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:72395' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:72399' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:72470' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:72475' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:72476' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:72502' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:73909' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:73959' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:73960' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:73961' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:73962' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:74458' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:74459' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:74460' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:74461' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:74462' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:74463' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:74674' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82304' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82322' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82336' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82347' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82354' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82372' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82857' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2026:82888' label: secalert@redhat.com - url: 'https://access.redhat.com/security/cve/CVE-2026-58016' label: secalert@redhat.com - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2492257' label: secalert@redhat.com - url: 'https://gitlab.gnome.org/GNOME/glib/-/issues/3932' label: secalert@redhat.com - url: >- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58016.json - url: 'https://www.cve.org/CVERecord?id=CVE-2026-58016' - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-58016' tags: - nvd - cve.org - csaf - vex - red-hat epss: 0.00545 epssPercentile: 0.45547 ssvc: exploitation: none automatable: 'yes' technicalImpact: partial timestamp: '2026-06-30T13:54:25.243451Z' ingestedAt: '2026-08-03T04:23:35.626Z' --- ## Overview A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. ## Affected - `glib < 2.88.1` - `enterprise_linux = 6.0` - `enterprise_linux = 7.0` - `enterprise_linux = 8.0` - `enterprise_linux = 9.0` - `enterprise_linux = 10.0` ## Remediation Upgrade past the affected range: - `glib 2.88.1` ## Vendor advisories - **RHSA-2026:51183** · Red Hat · fixed in: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51183) - **RHSA-2026:51185** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51185) - **RHSA-2026:42063** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-07-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:42063) - **RHSA-2026:51176** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51176) - **RHSA-2026:51177** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux BaseOS E4S (v.9.4) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51177) - **RHSA-2026:51175** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat CodeReady Linux Builder EUS (v.9.6) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51175) - **RHSA-2026:42089** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · released 2026-07-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:42089) - **RHSA-2026:42090** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2026-07-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:42090) - **RHSA-2026:51184** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51184) - **RHSA-2026:51181** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51181) - **RHSA-2026:51182** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8) · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51182) - **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10 · updated 2026-10-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-58016.json)