A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
{
"cna_assigner": "redhat",
"cwe_ids": [
"CWE-126"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58010.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "0:2.80.4-12.el10_2.21"
},
{
"fixed": "0:2.80.4-4.el10_0.17"
},
{
"fixed": "0:2.56.1-13.el7_9.1"
},
{
"fixed": "0:2.70.1-9.el8_10"
},
{
"fixed": "0:2.56.4-177.el8_10"
},
{
"fixed": "0:2.56.4-10.el8_4.7"
},
{
"fixed": "0:2.56.4-10.el8_4.7"
},
{
"fixed": "0:2.56.4-158.el8_6.7"
},
{
"fixed": "0:2.56.4-158.el8_6.7"
},
{
"fixed": "0:2.56.4-165.el8_8.2"
},
{
"fixed": "0:2.56.4-165.el8_8.2"
},
{
"fixed": "0:2.68.4-19.el9_8.9"
},
{
"fixed": "0:2.68.4-19.el9_8.9"
},
{
"fixed": "0:2.68.4-7.el9_2.7"
},
{
"fixed": "0:2.68.4-14.el9_4.8"
},
{
"fixed": "0:2.68.4-16.el9_6.7"
},
{
"fixed": "1791371080"
},
{
"fixed": "1791371069"
},
{
"fixed": "1791788287"
},
{
"fixed": "1791378395"
},
{
"fixed": "1791970484"
},
{
"fixed": "1791459707"
},
{
"fixed": "1791459711"
},
{
"fixed": "1791459759"
},
{
"fixed": "1789029076"
},
{
"fixed": "1791966259"
},
{
"fixed": "1788348522"
},
{
"fixed": "1788348571"
},
{
"fixed": "1788348571"
},
{
"fixed": "1788348594"
},
{
"fixed": "1790223279"
},
{
"fixed": "1790223719"
},
{
"fixed": "1790272426"
},
{
"fixed": "1790589998"
},
{
"fixed": "1790589912"
},
{
"fixed": "1790589914"
},
{
"fixed": "1790589855"
},
{
"fixed": "1790598593"
},
{
"fixed": "1790621714"
},
{
"fixed": "1790621718"
},
{
"fixed": "1790621713"
},
{
"fixed": "1791425869"
},
{
"fixed": "1791427182"
},
{
"fixed": "1791803821"
},
{
"fixed": "1791473631"
},
{
"fixed": "1791818357"
},
{
"fixed": "1791473614"
},
{
"fixed": "1788205779"
},
{
"fixed": "1788206196"
},
{
"fixed": "1790276886"
},
{
"fixed": "1790276884"
},
{
"fixed": "1790277045"
},
{
"fixed": "1790276889"
},
{
"fixed": "1790276974"
},
{
"fixed": "1790703497"
},
{
"fixed": "1790703506"
},
{
"fixed": "1790703590"
},
{
"fixed": "1790703568"
},
{
"fixed": "1790703586"
},
{
"fixed": "1790703494"
},
{
"fixed": "1790703542"
},
{
"fixed": "1790703539"
},
{
"fixed": "1790703553"
},
{
"fixed": "1790703631"
},
{
"fixed": "1790703597"
},
{
"fixed": "1790703641"
},
{
"fixed": "1790703630"
},
{
"fixed": "1790703541"
},
{
"fixed": "1790703545"
},
{
"fixed": "1791231926"
},
{
"fixed": "1791232048"
},
{
"fixed": "1790703552"
},
{
"fixed": "1790703656"
},
{
"fixed": "1790703557"
},
{
"fixed": "1790703707"
},
{
"fixed": "1790703645"
},
{
"fixed": "1790703554"
},
{
"fixed": "1790703554"
},
{
"fixed": "1790703630"
},
{
"fixed": "1790703706"
},
{
"fixed": "1787241211"
},
{
"fixed": "1787135742"
},
{
"fixed": "1787241260"
},
{
"fixed": "1788880445"
},
{
"fixed": "1788880464"
},
{
"fixed": "1788880456"
},
{
"fixed": "1788765051"
},
{
"fixed": "1788880581"
}
],
"source": "AFFECTED_FIELD",
"strategy": "InverseAffectedRanges"
}
]
}
]
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2.86.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gnome:glib:2.88.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.88.0"
},
{
"last_affected": "2.88.0"
}
],
"source": "CPE_STRING"
}
]
}
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2.86.5"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gnome:glib:2.88.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.88.0"
},
{
"last_affected": "2.88.0"
}
],
"source": "CPE_STRING"
}
]
}