CVE-2026-58011

HIGH
MEDIUM Priority: 0.04 BB Relevance: 75/100
Published: 2026-06-30 Modified: 2026-10-29 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
GNOME GLib 0 < 2.86.5
GNOME GLib 0 < 2.88.1
gnome glib < 2.86.5
gnome glib 2.88.0
redhat enterprise_linux 6.0
redhat enterprise_linux 7.0
redhat enterprise_linux 8.0
redhat enterprise_linux 9.0
redhat enterprise_linux 10.0

References & Advisories (79)

https://access.redhat.com/errata/RHSA-2026:49512
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55440
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57015
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:58981
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61766
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:61783
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63135
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63138
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:63140
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65762
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65763
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65767
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65768
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65769
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65770
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65771
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65773
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66018
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72394
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72395
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72399
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72470
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72475
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72476
vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:72502
vendor-advisory x_refsource_REDHAT
Showing 25 of 79 references

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.47%
Raw Score 0.004740
Percentile 40.9%
Date 2026-10-29

Intelligence Sources

mitre ref →
nvd ref →