A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2026-58012 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2492247 | Issue Tracking Third Party Advisory |
| https://gitlab.gnome.org/GNOME/glib/-/issues/3918 | Exploit Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
02 Jul 2026, 19:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* cpe:2.3:a:gnome:glib:2.88.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
|
| References | () https://access.redhat.com/security/cve/CVE-2026-58012 - Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2492247 - Issue Tracking, Third Party Advisory | |
| References | () https://gitlab.gnome.org/GNOME/glib/-/issues/3918 - Exploit, Issue Tracking, Vendor Advisory | |
| First Time |
Gnome
Gnome glib Redhat enterprise Linux Redhat |
30 Jun 2026, 13:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-30 13:19
Updated : 2026-07-02 19:28
NVD link : CVE-2026-58012
Mitre link : CVE-2026-58012
CVE.ORG link : CVE-2026-58012
JSON object : View
Products Affected
gnome
- glib
redhat
- enterprise_linux
CWE
CWE-126
Buffer Over-read