Off-by-One Error in GLib Affects Alignment Padding Checks
CVE-2026-58010
6.5MEDIUM
Key Information:
- Vendor
Gnome
- Status
- Vendor
- CVE Published:
- 30 June 2026
What is CVE-2026-58010?
A critical flaw exists in GLib due to an off-by-one error in the gvs_tuple_is_normal function. This error arises during the alignment padding checks, where the bounds verification incorrectly uses > instead of >=. As a result, this can lead to an out-of-bounds read, potentially revealing an additional byte of information and leading to a denial of service, especially if the read operation crosses a page boundary.
Affected Version(s)
Cert Manager support for Red Hat OpenShift release 1.19 1788348522
Cert Manager support for Red Hat OpenShift release 1.19 1788348571
Cert Manager support for Red Hat OpenShift release 1.19 1788348571
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank linhlhq for reporting this issue.