--- cve: "CVE-2026-58012" severity: "MEDIUM" cvss: 6.5 epss: "0.5%" vendor: "Gnome" kev: false exploited: false published: "2026-06-30 13:19:17" tags: [cve, security, medium] source: tsecurity.de CVE-Dossier exported: "2026-09-22T00:28:16+02:00" --- # CVE-2026-58012 > 6.5 MEDIUM ## Beschreibung A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change replacement escapes because the string_append function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the string is treated as raw bytes. This vulnerability can cause a minor information disclosure of 1-5 bytes and a denial of service when the buffer over-read crosses a page boundary. ## CVSS-Vektor ``` CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L ``` | Metrik | Wert | Bewertung | |---|---|---| | AV Angriffsvektor | Netzwerk | bad | | AC Komplexität | Gering | bad | | PR Privilegien | Keine | bad | | UI Interaktion | Keine | bad | | S Scope | Unverändert | good | | C Vertraulichkeit | Gering | warn | | I Integrität | Keine | good | | A Verfügbarkeit | Gering | warn | ## Patch verfügbar (OSV) - 3033f7862c2d3c7569cef2ad4b425cf42e95d4b4 (Commit) - 3033f7862c2d3c7569cef2ad4b425cf42e95d4b4 (Commit) ## Referenzen - - - - - - - - - - - - - - - --- _Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-58012) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_