A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
{
"cna_assigner": "redhat",
"cwe_ids": [
"CWE-193"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58014.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"fixed": "0:2.80.4-12.el10_2.21"
},
{
"fixed": "0:2.80.4-4.el10_0.17"
},
{
"fixed": "0:2.56.1-13.el7_9.1"
},
{
"fixed": "0:2.70.1-9.el8_10"
},
{
"fixed": "0:2.56.4-177.el8_10"
},
{
"fixed": "0:2.56.4-10.el8_4.7"
},
{
"fixed": "0:2.56.4-10.el8_4.7"
},
{
"fixed": "0:2.56.4-158.el8_6.7"
},
{
"fixed": "0:2.56.4-158.el8_6.7"
},
{
"fixed": "0:2.56.4-165.el8_8.2"
},
{
"fixed": "0:2.56.4-165.el8_8.2"
},
{
"fixed": "0:2.68.4-19.el9_8.9"
},
{
"fixed": "0:2.68.4-19.el9_8.9"
},
{
"fixed": "0:2.68.4-7.el9_2.7"
},
{
"fixed": "0:2.68.4-14.el9_4.8"
},
{
"fixed": "0:2.68.4-16.el9_6.7"
},
{
"fixed": "412.86.202609171314-0"
},
{
"fixed": "413.92.202609302032-0"
},
{
"fixed": "414.92.202609282130-0"
},
{
"fixed": "415.92.202610081130-0"
},
{
"fixed": "416.94.202609281908-0"
},
{
"fixed": "417.94.202609191027-0"
},
{
"fixed": "4.22.9.8.202609081748-0"
},
{
"fixed": "1791371080"
},
{
"fixed": "1791371069"
},
{
"fixed": "1791788287"
},
{
"fixed": "1791378395"
},
{
"fixed": "1791970484"
},
{
"fixed": "1791459707"
},
{
"fixed": "1791459711"
},
{
"fixed": "1791459759"
},
{
"fixed": "1789029076"
},
{
"fixed": "1791966259"
},
{
"fixed": "1788348522"
},
{
"fixed": "1788348571"
},
{
"fixed": "1788348571"
},
{
"fixed": "1788348594"
},
{
"fixed": "1790223279"
},
{
"fixed": "1790223719"
},
{
"fixed": "1790272426"
},
{
"fixed": "1790589998"
},
{
"fixed": "1790589912"
},
{
"fixed": "1790589914"
},
{
"fixed": "1790589855"
},
{
"fixed": "1790598593"
},
{
"fixed": "1790621714"
},
{
"fixed": "1790621718"
},
{
"fixed": "1790621713"
},
{
"fixed": "1791425869"
},
{
"fixed": "1791427182"
},
{
"fixed": "1791803821"
},
{
"fixed": "1791473631"
},
{
"fixed": "1791818357"
},
{
"fixed": "1791473614"
},
{
"fixed": "1788205779"
},
{
"fixed": "1788206196"
},
{
"fixed": "1790276886"
},
{
"fixed": "1790276884"
},
{
"fixed": "1790277045"
},
{
"fixed": "1790276889"
},
{
"fixed": "1790276974"
},
{
"fixed": "1790703497"
},
{
"fixed": "1790703506"
},
{
"fixed": "1790703590"
},
{
"fixed": "1790703568"
},
{
"fixed": "1790703586"
},
{
"fixed": "1790703494"
},
{
"fixed": "1790703542"
},
{
"fixed": "1790703539"
},
{
"fixed": "1790703553"
},
{
"fixed": "1790703631"
},
{
"fixed": "1790703597"
},
{
"fixed": "1790703641"
},
{
"fixed": "1790703630"
},
{
"fixed": "1790703541"
},
{
"fixed": "1790703545"
},
{
"fixed": "1791231926"
},
{
"fixed": "1791232048"
},
{
"fixed": "1790703552"
},
{
"fixed": "1790703656"
},
{
"fixed": "1790703557"
},
{
"fixed": "1790703707"
},
{
"fixed": "1790703645"
},
{
"fixed": "1790703554"
},
{
"fixed": "1790703554"
},
{
"fixed": "1790703630"
},
{
"fixed": "1790703706"
},
{
"fixed": "1787241211"
},
{
"fixed": "1787135742"
},
{
"fixed": "1787241260"
},
{
"fixed": "1788880445"
},
{
"fixed": "1788880464"
},
{
"fixed": "1788880456"
},
{
"fixed": "1788765051"
},
{
"fixed": "1788880581"
}
],
"source": "AFFECTED_FIELD",
"strategy": "InverseAffectedRanges"
}
]
}
]
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2.88.1"
}
],
"source": "CPE_RANGE"
}
]
}
{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "2.88.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
},
{
"cpe": "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "2.88.1"
}
],
"source": "CPE_RANGE"
}
]
}