CVE catalog

CVE-2026-58010

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses >

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.49% · Oct 25, 2026

A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses > instead of >=, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information disclosure of 1 byte and a denial of service when the out-of-bounds read crosses a page boundary.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglib2.0sid2.90.1-2fixed
Debianglib2.0forky2.90.1-2fixed
Debianglib2.0trixie2.84.4-3~deb13u5fixed
Debianglib2.0bookworm2.74.6-2+deb12u9vulnerable
Debianglib2.0bookworm-security2.74.6-2+deb12u2vulnerable
Cpeglib2.0Not reportedNot reportedvulnerable
CpeglibNot reported2.86.5fixed
CpeglibNot reportedNot reportedunknown
Cpeenterprise_linuxNot reportedNot reportedunknown
CpeglibNot reportedNot reportedunknown
Cpeenterprise_linuxNot reportedNot reportedunknown
Ubuntuglib2.0noble2.80.0-6ubuntu3.9fixed
Ubuntugir1.2-girepository-3.0noble2.80.0-6ubuntu3.9fixed
Ubuntugir1.2-girepository-3.0-devnoble2.80.0-6ubuntu3.9fixed
Ubuntugir1.2-glib-2.0noble2.80.0-6ubuntu3.9fixed
Ubuntugir1.2-glib-2.0-devnoble2.80.0-6ubuntu3.9fixed
Ubuntulibgirepository-2.0-0noble2.80.0-6ubuntu3.9fixed
Ubuntulibgirepository-2.0-devnoble2.80.0-6ubuntu3.9fixed
Ubuntulibglib2.0-0t64noble2.80.0-6ubuntu3.9fixed
Ubuntulibglib2.0-binnoble2.80.0-6ubuntu3.9fixed
Ubuntulibglib2.0-datanoble2.80.0-6ubuntu3.9fixed
Ubuntulibglib2.0-devnoble2.80.0-6ubuntu3.9fixed
Ubuntulibglib2.0-dev-binnoble2.80.0-6ubuntu3.9fixed
Ubuntulibglib2.0-docnoble2.80.0-6ubuntu3.9fixed
Ubuntulibglib2.0-testsnoble2.80.0-6ubuntu3.9fixed
Ubuntuglib2.0pro2.62.1-1vulnerable
Ubuntuglib2.0pro2.63.1-2vulnerable
Ubuntuglib2.0pro2.63.1-2ubuntu1vulnerable
Ubuntuglib2.0pro2.63.3-1vulnerable
Ubuntuglib2.0pro2.63.3-3vulnerable
Ubuntuglib2.0pro2.63.5-2vulnerable
Ubuntuglib2.0pro2.64.0-1vulnerable
Ubuntuglib2.0pro2.64.1-1vulnerable
Ubuntuglib2.0pro2.64.2-1~fakesync1vulnerable
Ubuntuglib2.0pro2.64.3-1~ubuntu20.04.1vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.1vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.2vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.3vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.4vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.6vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.7vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.8vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.9vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.9+esm1vulnerable
Ubuntuglib2.0pro2.64.6-1~ubuntu20.04.9+esm2fixed
Ubuntuglib2.022.042.68.4-1ubuntu1vulnerable
Ubuntuglib2.022.042.70.1-1vulnerable
Ubuntuglib2.022.042.70.2-1vulnerable
Ubuntuglib2.022.042.71.0-2vulnerable
Ubuntuglib2.022.042.71.1-1vulnerable
Ubuntuglib2.022.042.71.2-1vulnerable
Ubuntuglib2.022.042.71.3-1vulnerable
Ubuntuglib2.022.042.72.0-1vulnerable
Ubuntuglib2.022.042.72.1-1vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu1vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.2vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.3vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.4vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.5vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.6vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.7vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.8vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.9vulnerable
Ubuntuglib2.022.042.72.4-0ubuntu2.10fixed
Ubuntuglib2.024.042.78.0-2vulnerable
Ubuntuglib2.024.042.78.1-4vulnerable
Ubuntuglib2.024.042.78.3-1vulnerable
Ubuntuglib2.024.042.78.3-2vulnerable
Ubuntuglib2.024.042.79.1-1vulnerable
Ubuntuglib2.024.042.79.2-1~ubuntu1vulnerable
Ubuntuglib2.024.042.79.3-3ubuntu5vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu1vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.1vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.2vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.4vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.5vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.6vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.7vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.8vulnerable
Ubuntuglib2.024.042.80.0-6ubuntu3.9fixed
Ubuntuglib2.025.102.84.1-1vulnerable
Ubuntuglib2.025.102.84.1-2vulnerable
Ubuntuglib2.025.102.84.2-1vulnerable
Ubuntuglib2.025.102.84.3-1vulnerable
Ubuntuglib2.025.102.85.1-2vulnerable
Ubuntuglib2.025.102.85.2-2vulnerable
Ubuntuglib2.025.102.85.3-1vulnerable
Ubuntuglib2.025.102.86.0-2vulnerable
Ubuntuglib2.025.102.86.0-2ubuntu0.1vulnerable
Ubuntuglib2.025.102.86.0-2ubuntu0.2vulnerable
Ubuntuglib2.025.102.86.0-2ubuntu0.3vulnerable
Ubuntuglib2.026.042.86.0-2vulnerable
Ubuntuglib2.026.042.86.1-1vulnerable
Ubuntuglib2.026.042.86.1-2vulnerable
Ubuntuglib2.026.042.86.2-1vulnerable
Ubuntuglib2.026.042.86.3-1vulnerable
Ubuntuglib2.026.042.86.3-4vulnerable
Ubuntuglib2.026.042.87.2-2vulnerable
Ubuntuglib2.026.042.87.2-3vulnerable
Ubuntuglib2.026.042.87.3-1vulnerable
Ubuntuglib2.026.042.88.0-1vulnerable
Ubuntuglib2.026.042.88.0-1ubuntu0.1fixed
Suseglib2linux micro 6.12.78.6-slfo.1.1_7.1fixed
Suseglib2linux micro 6.02.76.2-13.1fixed
Suseglib2linux micro 6.22.84.4-160000.4.1fixed
Suseglib2linux enterprise module for basesystem 15 sp72.78.6-150600.4.38.1fixed
Suseglib2linux enterprise server 15 sp6-ltss2.78.6-150600.4.38.1fixed
Suseglib2linux enterprise server for sap applications 15 sp62.78.6-150600.4.38.1fixed
Suseglib2linux enterprise server 12 sp5-ltss2.48.2-12.61.1fixed
Suseglib2linux enterprise server ltss extended security 12 sp52.48.2-12.61.1fixed
Suseglib2linux enterprise micro 5.32.70.5-150400.3.37.1fixed
Suseglib2linux enterprise micro 5.42.70.5-150400.3.37.1fixed
Suseglib2linux enterprise micro 5.52.70.5-150400.3.37.1fixed
Suseglib2linux enterprise high performance computing 15 sp4-espos2.70.5-150400.3.37.1fixed
Suseglib2linux enterprise high performance computing 15 sp4-ltss2.70.5-150400.3.37.1fixed
Suseglib2linux enterprise high performance computing 15 sp5-espos2.70.5-150400.3.37.1fixed
Suseglib2linux enterprise high performance computing 15 sp5-ltss2.70.5-150400.3.37.1fixed
Suseglib2linux enterprise server 15 sp4-ltss2.70.5-150400.3.37.1fixed
Suseglib2linux enterprise server 15 sp5-ltss2.70.5-150400.3.37.1fixed
Suseglib2linux enterprise server for sap applications 15 sp42.70.5-150400.3.37.1fixed
Suseglib2linux enterprise server for sap applications 15 sp52.70.5-150400.3.37.1fixed
Suseglib2linux enterprise server 16.02.84.4-160000.4.1fixed
Suseglib2-doclinux enterprise server 16.02.84.4-160000.4.1fixed
Suseglib2linux enterprise server for sap applications 16.02.84.4-160000.4.1fixed
Suseglib2-doclinux enterprise server for sap applications 16.02.84.4-160000.4.1fixed
Opensuseglib2leap 16.02.84.4-160000.4.1fixed
Opensuseglib2-docleap 16.02.84.4-160000.4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglib2.0sourcesid2.88.1-2not yet assignedNot reportedNot reported
Debianglib2.0sourceforky2.88.1-2not yet assignedNot reportedNot reported
Debianglib2.0sourcetrixie2.84.4-3~deb13u4not yet assignedNot reportedNot reported
Debianglib2.0sourcebookworm(unfixed)not yet assignedNot reportedNot reported
CpeglibcpeNot reported2.86.5Not reportedNot reportedNot reported
Ubuntuglib2.0debnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntugir1.2-girepository-3.0debnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntugir1.2-girepository-3.0-devdebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntugir1.2-glib-2.0debnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntugir1.2-glib-2.0-devdebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibgirepository-2.0-0debnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibgirepository-2.0-devdebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibglib2.0-0t64debnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibglib2.0-bindebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibglib2.0-datadebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibglib2.0-devdebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibglib2.0-dev-bindebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibglib2.0-docdebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntulibglib2.0-testsdebnoble2.80.0-6ubuntu3.9Not reportedNot reportedNot reported
Ubuntuglib2.0debpro2.64.6-1~ubuntu20.04.9+esm2Not reportedUBUNTU-CVE-2026-58010Not reported
Ubuntuglib2.0deb22.042.72.4-0ubuntu2.10Not reportedUBUNTU-CVE-2026-58010Not reported
Ubuntuglib2.0deb24.042.80.0-6ubuntu3.9Not reportedUBUNTU-CVE-2026-58010Not reported
Ubuntuglib2.0deb26.042.88.0-1ubuntu0.1Not reportedUBUNTU-CVE-2026-58010Not reported
Suseglib2rpmlinux micro 6.12.78.6-slfo.1.1_7.1Not reportedSUSE-SU-2026:23078-1Not reported
Suseglib2rpmlinux micro 6.02.76.2-13.1Not reportedSUSE-SU-2026:23009-1Not reported
Suseglib2rpmlinux micro 6.22.84.4-160000.4.1Not reportedSUSE-SU-2026:22928-1Not reported
Suseglib2rpmlinux enterprise module for basesystem 15 sp72.78.6-150600.4.38.1Not reportedSUSE-SU-2026:3341-1Not reported
Suseglib2rpmlinux enterprise server 15 sp6-ltss2.78.6-150600.4.38.1Not reportedSUSE-SU-2026:3341-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 15 sp62.78.6-150600.4.38.1Not reportedSUSE-SU-2026:3341-1Not reported
Suseglib2rpmlinux enterprise server 12 sp5-ltss2.48.2-12.61.1Not reportedSUSE-SU-2026:3236-1Not reported
Suseglib2rpmlinux enterprise server ltss extended security 12 sp52.48.2-12.61.1Not reportedSUSE-SU-2026:3236-1Not reported
Suseglib2rpmlinux enterprise micro 5.32.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise micro 5.42.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise micro 5.52.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise high performance computing 15 sp4-espos2.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise high performance computing 15 sp4-ltss2.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise high performance computing 15 sp5-espos2.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise high performance computing 15 sp5-ltss2.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise server 15 sp4-ltss2.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise server 15 sp5-ltss2.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 15 sp42.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 15 sp52.70.5-150400.3.37.1Not reportedSUSE-SU-2026:3235-1Not reported
Suseglib2rpmlinux enterprise server 16.02.84.4-160000.4.1Not reportedSUSE-SU-2026:22846-1Not reported
Suseglib2-docrpmlinux enterprise server 16.02.84.4-160000.4.1Not reportedSUSE-SU-2026:22846-1Not reported
Suseglib2rpmlinux enterprise server for sap applications 16.02.84.4-160000.4.1Not reportedSUSE-SU-2026:22846-1Not reported
Suseglib2-docrpmlinux enterprise server for sap applications 16.02.84.4-160000.4.1Not reportedSUSE-SU-2026:22846-1Not reported
Opensuseglib2rpmleap 16.02.84.4-160000.4.1Not reportedOPENSUSE-SU-2026:21410-1Not reported
Opensuseglib2-docrpmleap 16.02.84.4-160000.4.1Not reportedOPENSUSE-SU-2026:21410-1Not reported

Notes

[bookworm] glib2.0: Minor issue; GVariant deserialiser 1-byte over-read, reachability-gated

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libglib2.0-0]Affected

    Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

  • [libglib2.0-bin]Affected

    Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

  • [libglib2.0-data]Affected

    Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · all · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u9 · all · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

  • [libglib2.0-dev]Affected

    Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

  • [libglib2.0-doc]Affected

    Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · all · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u9 · all · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · all · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

  • Source package: [glib2.0]

    Details (4)
    • 2.74.6-2+deb12u9 · amd64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u9 · arm64 · bookworm

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · amd64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

    • 2.74.6-2+deb12u2 · arm64 · bookworm-security

      Affected

      nvd · glib2.0 · debian · bookworm

Observed:

References