Vulnerability Report

CVE-2026-58016

Title: GLib D-Bus Introspection XML DoS

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2026-58016.

CWE Category CWE-191

Published Date Jun 30, 2026

Modified Date Jul 28, 2026

Exploit Status Not Found

Score 7.5 CVSS v3.1

Exploit Probability (EPSS)

0.44%

Vulnerability Summary

CVE-2026-58016: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

Impacted Vendors

gnome 1

Reference Links

https://access.redhat.com/security/cve/CVE-2026-58016 https://bugzilla.redhat.com/show_bug.cgi?id=2492257 https://gitlab.gnome.org/GNOME/glib/-/issues/3932

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.5

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H