CVE-2026-58010 Details

A buffer over-read vulnerability has been identified in GLib, specifically within the GVariant serialization process. The issue arises from an off-by-one error in the 'gvs_tuple_is_normal' function, located in 'glib/gvariant-serialiser.c'. This flaw occurs during an alignment padding check, where the bounds verification incorrectly uses 'greater than' instead of 'greater than or equal to'. As a result, the function can read one byte beyond the intended limit, potentially disclosing minor information and causing a denial-of-service condition if the out-of-bounds read crosses a page boundary.

Users can upgrade to GLib versions 2.88.1 or 2.86.5, both of which include the necessary fix. Instructions for updating GLib can be found in the Red Hat Enterprise Linux 8 and 9 documentation.