Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-58014 →

DEBIAN-CVE-2026-58014

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key fi...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 glib2.0

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 glib2.0

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84.4-3~deb13u4"}]}]

Debian:14 glib2.0

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.88.1-2"}]}]

Références

advisory security-tracker.debian.org