HIGHVulnerability
Verified
Global
NVD HIGH: CVE-2026-58010 — A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_norm...
·Source: NIST NVD
Updated:
Executive Summary
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.
Analysis
A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary. CVSS Score: 6.5. Published: 2026-06-30T13:19:17.067.