CVE-2026-58016

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:42063 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42089 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42090 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:44481 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:46836 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:49512 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51175 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51176 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51177 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51181 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51182 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51183 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51184 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:51185 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:53371 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:58981 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72394 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72395 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72399 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72470 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72475 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72476 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:72502 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73909 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73959 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73960 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73961 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:73962 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74458 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74459 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74460 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74461 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74462 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74463 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:74674 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82304 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82322 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82336 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82347 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82354 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82372 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82857 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:82888 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-58016 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2492257 Issue Tracking Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3932 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:*
cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:*
cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:*
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:*

History

29 Oct 2026, 14:16

Type Values Removed Values Added
First Time Redhat enterprise Linux Els
Redhat cert-manager Operator
Redhat openshift Ai
Redhat enterprise Linux Eus
Redhat update Infrastructure
Redhat discovery
Redhat codeready Linux Builder Eus
Redhat codeready Linux Builder
Redhat enterprise Linux Update Services For Sap Solutions
Redhat enterprise Linux Server Tus
Redhat enterprise Linux Aus
Redhat insights-proxy
CPE cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:update_infrastructure:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:cert-manager_operator:1.20.0:*:*:*:*:openshift:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:cert-manager_operator:*:*:*:*:*:openshift:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:cert-manager_operator:1.17.0:*:*:*:*:openshift:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:insights-proxy:1.5.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_els:7.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*
References () https://access.redhat.com/errata/RHSA-2026:42063 - () https://access.redhat.com/errata/RHSA-2026:42063 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:42089 - () https://access.redhat.com/errata/RHSA-2026:42089 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:42090 - () https://access.redhat.com/errata/RHSA-2026:42090 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:44481 - () https://access.redhat.com/errata/RHSA-2026:44481 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:46836 - () https://access.redhat.com/errata/RHSA-2026:46836 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:49512 - () https://access.redhat.com/errata/RHSA-2026:49512 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51175 - () https://access.redhat.com/errata/RHSA-2026:51175 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51176 - () https://access.redhat.com/errata/RHSA-2026:51176 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51177 - () https://access.redhat.com/errata/RHSA-2026:51177 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51181 - () https://access.redhat.com/errata/RHSA-2026:51181 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51182 - () https://access.redhat.com/errata/RHSA-2026:51182 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51183 - () https://access.redhat.com/errata/RHSA-2026:51183 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51184 - () https://access.redhat.com/errata/RHSA-2026:51184 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:51185 - () https://access.redhat.com/errata/RHSA-2026:51185 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:53371 - () https://access.redhat.com/errata/RHSA-2026:53371 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:58981 - () https://access.redhat.com/errata/RHSA-2026:58981 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:72394 - () https://access.redhat.com/errata/RHSA-2026:72394 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:72395 - () https://access.redhat.com/errata/RHSA-2026:72395 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:72399 - () https://access.redhat.com/errata/RHSA-2026:72399 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:72470 - () https://access.redhat.com/errata/RHSA-2026:72470 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:72475 - () https://access.redhat.com/errata/RHSA-2026:72475 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:72476 - () https://access.redhat.com/errata/RHSA-2026:72476 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:72502 - () https://access.redhat.com/errata/RHSA-2026:72502 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:73909 - () https://access.redhat.com/errata/RHSA-2026:73909 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:73959 - () https://access.redhat.com/errata/RHSA-2026:73959 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:73960 - () https://access.redhat.com/errata/RHSA-2026:73960 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:73961 - () https://access.redhat.com/errata/RHSA-2026:73961 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:73962 - () https://access.redhat.com/errata/RHSA-2026:73962 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74458 - () https://access.redhat.com/errata/RHSA-2026:74458 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74459 - () https://access.redhat.com/errata/RHSA-2026:74459 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74460 - () https://access.redhat.com/errata/RHSA-2026:74460 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74461 - () https://access.redhat.com/errata/RHSA-2026:74461 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74462 - () https://access.redhat.com/errata/RHSA-2026:74462 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74463 - () https://access.redhat.com/errata/RHSA-2026:74463 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:74674 - () https://access.redhat.com/errata/RHSA-2026:74674 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82304 - () https://access.redhat.com/errata/RHSA-2026:82304 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82322 - () https://access.redhat.com/errata/RHSA-2026:82322 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82336 - () https://access.redhat.com/errata/RHSA-2026:82336 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82347 - () https://access.redhat.com/errata/RHSA-2026:82347 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82354 - () https://access.redhat.com/errata/RHSA-2026:82354 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82372 - () https://access.redhat.com/errata/RHSA-2026:82372 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82857 - () https://access.redhat.com/errata/RHSA-2026:82857 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:82888 - () https://access.redhat.com/errata/RHSA-2026:82888 - Vendor Advisory
References () https://access.redhat.com/security/cve/CVE-2026-58016 - Third Party Advisory () https://access.redhat.com/security/cve/CVE-2026-58016 - Vendor Advisory

14 Oct 2026, 20:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82857 -
  • () https://access.redhat.com/errata/RHSA-2026:82888 -

14 Oct 2026, 03:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82304 -
  • () https://access.redhat.com/errata/RHSA-2026:82322 -
  • () https://access.redhat.com/errata/RHSA-2026:82336 -
  • () https://access.redhat.com/errata/RHSA-2026:82347 -
  • () https://access.redhat.com/errata/RHSA-2026:82354 -
  • () https://access.redhat.com/errata/RHSA-2026:82372 -

02 Oct 2026, 03:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:74674 -

01 Oct 2026, 17:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:74458 -
  • () https://access.redhat.com/errata/RHSA-2026:74459 -
  • () https://access.redhat.com/errata/RHSA-2026:74460 -
  • () https://access.redhat.com/errata/RHSA-2026:74461 -
  • () https://access.redhat.com/errata/RHSA-2026:74462 -
  • () https://access.redhat.com/errata/RHSA-2026:74463 -

30 Sep 2026, 16:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:73909 -
  • () https://access.redhat.com/errata/RHSA-2026:73959 -
  • () https://access.redhat.com/errata/RHSA-2026:73960 -
  • () https://access.redhat.com/errata/RHSA-2026:73961 -
  • () https://access.redhat.com/errata/RHSA-2026:73962 -

29 Sep 2026, 01:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72502 -

28 Sep 2026, 15:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72470 -
  • () https://access.redhat.com/errata/RHSA-2026:72475 -
  • () https://access.redhat.com/errata/RHSA-2026:72476 -

28 Sep 2026, 11:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72399 -

28 Sep 2026, 08:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72394 -
  • () https://access.redhat.com/errata/RHSA-2026:72395 -

Information

Published : 2026-06-30 13:19

Updated : 2026-10-29 14:16


NVD link : CVE-2026-58016

Mitre link : CVE-2026-58016

CVE.ORG link : CVE-2026-58016


JSON object : View

Products Affected

redhat

  • openshift_ai
  • enterprise_linux_aus
  • enterprise_linux_eus
  • update_infrastructure
  • cert-manager_operator
  • codeready_linux_builder
  • enterprise_linux
  • insights-proxy
  • enterprise_linux_els
  • discovery
  • enterprise_linux_update_services_for_sap_solutions
  • enterprise_linux_server_tus
  • codeready_linux_builder_eus

gnome

  • glib
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)