CVE-2026-58011

ADVISORY - debian

Summary

A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the g_date_time_add_full function is processed. This flaw can corrupt the date output and potentially cause logic errors that may lead to a denial of service.

glib2.0 2.88.1-2 [trixie] - glib2.0 (Minor issue) [bookworm] - glib2.0 (Minor issue; GDateTime 2-byte over-read, reachability-gated) [bullseye] - glib2.0 (Minor issue; GDateTime 2-byte over-read, reachability-gated) https://gitlab.gnome.org/GNOME/glib/-/work_items/3917 https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5131 (2.89.0) https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5134 (2.88.1) https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5135 (2.86.5)

EPSS Score⁠: 0.00344 (0.268)

Common Weakness Enumeration (CWE)

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.