CoreCVE
Back

HIGH

Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

Published Jun 30, 2026

Description

A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.

Affected products

Remediation

Vendor solution

To mitigate this vulnerability, restrict any custom line terminator string passed to g_io_channel_set_line_term() to a maximum length of one byte before calling g_io_channel_read_line_backend(). Using the default line terminators will completely neutralize this issue.

Red Hat statement

Any applications calling g_io_channel_set_line_term() with a multi-byte line terminator (length greater than one) and subsequently calling g_io_channel_read_line_backend() are vulnerable to this issue. This flaw can cause a buffer over-read of 8 bytes, leading to an information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary. Due to these reasons, this vulnerability has been rated with a moderate severity.

Red Hat mitigation

To mitigate this vulnerability, restrict any custom line terminator string passed to g_io_channel_set_line_term() to a maximum length of one byte before calling g_io_channel_read_line_backend(). Using the default line terminators will completely neutralize this issue.

Metrics

Weaknesses (1)

CWE-126

References (54)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jun 30, 2026
Updated Oct 2, 2026
Reserved Jun 26, 2026
Link CVE-2026-58013
CISA Vulnrichment
Updated Jun 30, 2026
NVD
Status Modified
Modified Oct 2, 2026
Link CVE-2026-58013
Red Hat
Severity Moderate
Public date Apr 3, 2026
Links CVE-2026-58013 - Bugzilla