Gnome Glib — CVE-2026-58016 (Critical)

Date Jun 30, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Gnome · Glib

CVE CVE-2026-58016

Critical vendor advisory CVE-2026-58016

Summary

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a <node> element nested within other elements like <method>, <signal>, <property> or <arg>. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 7.5) in Gnome Glib. Patch or mitigate promptly. EPSS percentile: 26%.

Operator check

Review CVE-2026-58016 in your asset inventory. Apply patches per vendor guidance and verify Glib is not exposed. CVSS score: 7.5. EPSS probability: 0.3%; percentile: 26%.

Sources

NVD — CVE-2026-58016 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed