Riskcovery

CVE-2026-16118

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

State
Published
Severity
7.1 High
Published
Jul 17, 2026
Updated
Oct 29, 2026
Reserved
Jul 17, 2026

Read the record on cve.org

Description

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:Hredhat

Weaknesses

Affected Products

ProductVersions
xdgmimexdg
    Red Hat Enterprise Linux 10Red Hat
    • 0:2.80.4-12.el10_2.22 and laterNot affected
    Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat
    • 0:2.80.4-4.el10_0.18 and laterNot affected
    Red Hat Enterprise Linux 8Red Hat
    • 0:2.56.4-178.el8_10 and laterNot affected
    Red Hat Enterprise Linux 9Red Hat
    • 0:2.68.4-19.el9_8.10 and laterNot affected
    Red Hat Enterprise Linux 9Red Hat
    • 0:2.68.4-19.el9_8.10 and laterNot affected
    Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat
    • 0:2.68.4-7.el9_2.8 and laterNot affected
    Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat
    • 0:2.68.4-14.el9_4.9 and laterNot affected
    Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat
    • 0:2.68.4-16.el9_6.8 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.17Red Hat
    • 1791371080 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.17Red Hat
    • 1791371069 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.17Red Hat
    • 1791788287 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.17Red Hat
    • 1791378395 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.17Red Hat
    • 1791970484 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.18Red Hat
    • 1791459707 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.18Red Hat
    • 1791459711 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.18Red Hat
    • 1791459759 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.18Red Hat
    • 1789029076 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.18Red Hat
    • 1791966259 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790223279 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790223719 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790272426 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790589998 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790589912 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790589914 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790589855 and laterNot affected
    Cert Manager support for Red Hat OpenShift release 1.20Red Hat
    • 1790598593 and laterNot affected
    Red Hat AI Inference Server 3.2Red Hat
    • 1790621714 and laterNot affected
    Red Hat AI Inference Server 3.2Red Hat
    • 1790621718 and laterNot affected
    Red Hat AI Inference Server 3.2Red Hat
    • 1790621713 and laterNot affected
    Red Hat AI Inference Server 3.5Red Hat
    • 1791425869 and laterNot affected
    Red Hat AI Inference Server 3.5Red Hat
    • 1791427182 and laterNot affected
    Red Hat AI Inference Server 3.5Red Hat
    • 1791803821 and laterNot affected
    Red Hat AI Inference Server 3.5Red Hat
    • 1791473631 and laterNot affected
    Red Hat AI Inference Server 3.5Red Hat
    • 1791818357 and laterNot affected
    Red Hat AI Inference Server 3.5Red Hat
    • 1791473614 and laterNot affected
    Red Hat Cost Management On-Premise 1Red Hat
    • 1791460851 and laterNot affected
    Red Hat Enterprise Linux AI 3.5Red Hat
    • 1793206758 and laterNot affected
    Red Hat Enterprise Linux AI 3.5Red Hat
    • 1793194817 and laterNot affected
    Red Hat Enterprise Linux AI 3.5Red Hat
    • 1793194815 and laterNot affected
    Red Hat Enterprise Linux AI 3.5Red Hat
    • 1793194834 and laterNot affected
    Red Hat Enterprise Linux AI 3.5Red Hat
    • 1793135861 and laterNot affected
    Red Hat Enterprise Linux AI 3.5Red Hat
    • 1793194815 and laterNot affected
    Red Hat Enterprise Linux AI 3.5Red Hat
    • 1793135863 and laterNot affected
    Red Hat OpenShift AI 3.0Red Hat
    • 1790276886 and laterNot affected
    Red Hat OpenShift AI 3.0Red Hat
    • 1790276884 and laterNot affected
    Red Hat OpenShift AI 3.0Red Hat
    • 1790277045 and laterNot affected
    Red Hat OpenShift AI 3.0Red Hat
    • 1790276889 and laterNot affected
    Red Hat OpenShift AI 3.0Red Hat
    • 1790276974 and laterNot affected
    Red Hat OpenShift AI 3.2Red Hat
    • 1790703497 and laterNot affected
    Red Hat OpenShift AI 3.2Red Hat
    • 1790703506 and laterNot affected
    Red Hat OpenShift AI 3.2Red Hat
    • 1790703590 and laterNot affected
    Red Hat OpenShift AI 3.2Red Hat
    • 1790703568 and laterNot affected
    Red Hat OpenShift AI 3.2Red Hat
    • 1790703586 and laterNot affected
    Red Hat OpenShift AI 3.2Red Hat
    • 1790703494 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703615 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703516 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703524 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703601 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703516 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703608 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703579 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1790703516 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1791231820 and laterNot affected
    Red Hat OpenShift AI 3.3Red Hat
    • 1791232257 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703542 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703539 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703553 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703631 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703597 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703641 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703630 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703541 and laterNot affected
    Red Hat OpenShift AI 3.4Red Hat
    • 1790703545 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703552 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703656 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703557 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703707 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703645 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703554 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703554 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703630 and laterNot affected
    Red Hat OpenShift AI 3.5Red Hat
    • 1790703706 and laterNot affected
    Red Hat Update Infrastructure 5Red Hat
    • 1789479916 and laterNot affected
    Red Hat Update Infrastructure 5Red Hat
    • 1789479900 and laterNot affected
    Red Hat Update Infrastructure 5Red Hat
    • 1789479891 and laterNot affected
    Red Hat Update Infrastructure 5Red Hat
    • 1789482961 and laterNot affected
    Red Hat Update Infrastructure 5Red Hat
    • 1789478095 and laterNot affected
    Red Hat Enterprise Linux 7Red Hat
      Red Hat Enterprise Linux 7Red Hat
        Red Hat Enterprise Linux 8Red Hat
          Red Hat Enterprise Linux 9Red Hat

            References

            Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.