# CVE-2026-58014

## Summary

- **CVE ID:** CVE-2026-58014
- **Severity:** HIGH
- **CVSS Score:** 7.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
- **CWE:** CWE-193
- **Published:** Jun 30, 2026
- **Last Modified:** Sep 9, 2026

## Description

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

## Affected Products

- GNOME — GLib (0)
- Red Hat — Red Hat Enterprise Linux 8 (0:2.70.1-9.el8_10)
- Red Hat — Red Hat Enterprise Linux 9 (0:2.68.4-19.el9_8.9)
- Red Hat — Red Hat Enterprise Linux 10 (0:2.80.4-12.el10_2.21)
- Red Hat — Red Hat Update Infrastructure 5 (1787241211)
- Red Hat — Red Hat Update Infrastructure 5 (1787135742)
- Red Hat — Red Hat Update Infrastructure 5 (1787241260)
- Red Hat — Red Hat Enterprise Linux 8 (0:2.56.4-177.el8_10)
- Red Hat — Red Hat Discovery 2 (1788205779)
- Red Hat — Red Hat Discovery 2 (1788206196)
- Red Hat — Cert Manager support for Red Hat OpenShift release 1.19 (1788348522)
- Red Hat — Cert Manager support for Red Hat OpenShift release 1.19 (1788348571)
- Red Hat — Cert Manager support for Red Hat OpenShift release 1.19 (1788348594)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:2.56.4-10.el8_4.7)
- Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:2.56.4-10.el8_4.7)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:2.56.1-13.el7_9.1)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:2.68.4-7.el9_2.7)
- Red Hat — Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions (0:2.68.4-14.el9_4.8)
- Red Hat — Red Hat Enterprise Linux 10.0 Extended Update Support (0:2.80.4-4.el10_0.17)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:2.56.4-158.el8_6.7)
- Red Hat — Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On (0:2.56.4-158.el8_6.7)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:2.56.4-165.el8_8.2)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:2.56.4-165.el8_8.2)
- Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:2.68.4-16.el9_6.7)

## References

- [CNA](https://access.redhat.com/security/cve/CVE-2026-58014)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2492255)
- [CNA](https://gitlab.gnome.org/GNOME/glib/-/issues/3930)
- [CNA](https://access.redhat.com/errata/RHSA-2026:49512)
- [CNA](https://access.redhat.com/errata/RHSA-2026:55440)
- [CNA](https://access.redhat.com/errata/RHSA-2026:57015)
- [CNA](https://access.redhat.com/errata/RHSA-2026:58981)
- [CNA](https://access.redhat.com/errata/RHSA-2026:61766)
- [CNA](https://access.redhat.com/errata/RHSA-2026:61783)
- [CNA](https://access.redhat.com/errata/RHSA-2026:63135)
- [CNA](https://access.redhat.com/errata/RHSA-2026:63138)
- [CNA](https://access.redhat.com/errata/RHSA-2026:63140)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65762)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65768)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65770)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65773)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65763)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65767)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65769)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65771)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.39%
- **EPSS Percentile:** 32.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._