Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Historical advisory recorded 29 Oct 2026 23:48:55 UTC. Read the latest advisory.
cve-program · CVE-2026-58014
PublishedA flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-58014
PublishedGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
- Source published
- 30 Jun 2026 12:57:35 UTC
- Source modified
- 29 Oct 2026 22:22:49 UTC
- Saved here
- 29 Oct 2026 23:48:55 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L