CVE-2026-58014

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

• glib2.0 2.88.1-2 [trixie] - glib2.0 (Minor issue) [bookworm] - glib2.0 (Minor issue; GKeyFile off-by-one 1-byte OOB, reachability-gated) [bullseye] - glib2.0 (Minor issue; GKeyFile off-by-one 1-byte OOB, reachability-gated) https://gitlab.gnome.org/GNOME/glib/-/work_items/3930 https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5171 (2.89.0) https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5174 (2.88.1)