A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.
{
"license": "CC-BY-4.0",
"sources": [
{
"published": "2026-06-30T13:19:17.580Z",
"html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58014",
"id": "CVE-2026-58014",
"modified": "2026-08-03T06:16:38.910Z",
"database_specific": {
"status": "Modified"
},
"imported": "2026-08-11T06:49:24.128Z",
"url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-58014"
},
{
"published": "2026-06-30T15:30:45Z",
"id": "GHSA-h88q-m8mm-7243",
"imported": "2026-08-11T06:49:24.947Z",
"modified": "2026-08-03T06:32:44Z",
"html_url": "https://github.com/advisories/GHSA-h88q-m8mm-7243",
"url": "https://api.github.com/advisories/GHSA-h88q-m8mm-7243"
},
{
"published": "2026-06-30T12:57:35Z",
"id": "EUVD-2026-40316",
"imported": "2026-08-11T06:49:24.330Z",
"modified": "2026-08-03T04:04:43Z",
"html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-40316",
"url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-40316"
}
]
}