AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2026-58014.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 8.6CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 09, 2026

Disclosure summary

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

Source-reported weakness categories

CWE-193

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2026-58014

Open original source · Updated Oct 09, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
gnomeglib* {"versionEndExcluding":"2.88.1"}
redhatenterprise_linux6.0
redhatenterprise_linux7.0
redhatenterprise_linux8.0
redhatenterprise_linux9.0
redhatenterprise_linux10.0

Original records & references

PUBLISHED 2026-06-30T09:19:17-04:00
MODIFIED 2026-10-09T00:18:10-04:00
INGESTED 2026-10-10T20:50:35-04:00