A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes or a denial of service when the buffer over-read crosses a page boundary.
{
"license": "CC-BY-4.0",
"sources": [
{
"id": "CVE-2026-58013",
"published": "2026-06-30T13:19:17.457Z",
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58013",
"modified": "2026-08-03T06:16:38.747Z",
"database_specific": {
"status": "Modified"
},
"imported": "2026-08-11T06:49:24.108Z",
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-58013"
},
{
"published": "2026-06-30T15:30:45Z",
"id": "GHSA-4x46-h598-64qr",
"imported": "2026-08-11T06:49:25.586Z",
"modified": "2026-08-03T06:32:44Z",
"html_url": "https://github.com/advisories/GHSA-4x46-h598-64qr",
"url": "https://api.github.com/advisories/GHSA-4x46-h598-64qr"
},
{
"id": "EUVD-2026-40315",
"published": "2026-06-30T12:57:34Z",
"imported": "2026-08-11T06:49:24.330Z",
"modified": "2026-08-03T04:04:39Z",
"html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40315",
"url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-40315"
}
]
}