A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.
References
Configurations
Configuration 1 (hide)
|
History
29 Oct 2026, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2026, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Oct 2026, 09:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 Oct 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Oct 2026, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 Oct 2026, 11:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Oct 2026, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Oct 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Sep 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Sep 2026, 11:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Sep 2026, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Sep 2026, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Sep 2026, 11:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 Sep 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2026-06-30 13:19
Updated : 2026-10-29 23:16
NVD link : CVE-2026-58012
Mitre link : CVE-2026-58012
CVE.ORG link : CVE-2026-58012
JSON object : View
Products Affected
redhat
- enterprise_linux
gnome
- glib
CWE
CWE-126
Buffer Over-read
