← CVE Intelligence

CVE-2026-16118

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c PUBLISHED

Description (CNA)

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.

Affected (CNA)

Vendor / productVersions
xdg / xdgmimeaffected
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.80.4-12.el10_2.22 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:2.80.4-4.el10_0.18 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.56.4-178.el8_10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-19.el9_8.10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-19.el9_8.10 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:2.68.4-7.el9_2.8 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:2.68.4-14.el9_4.9 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:2.68.4-16.el9_6.8 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371080 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791371069 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791788287 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791378395 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17unaffected 1791970484 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223279 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790223719 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790272426 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589998 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589912 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589914 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790589855 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20unaffected 1790598593 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621714 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621718 before *
Red Hat / Red Hat AI Inference Server 3.2unaffected 1790621713 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791425869 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791427182 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791803821 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791473631 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791818357 before *
Red Hat / Red Hat AI Inference Server 3.5unaffected 1791473614 before *
Red Hat / Red Hat Cost Management On-Premise 1unaffected 1791460851 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276886 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276884 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790277045 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276889 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1790276974 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703497 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703506 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703590 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703568 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703586 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1790703494 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703615 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703516 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703524 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703601 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703516 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703608 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703579 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1790703516 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791231820 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791232257 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703542 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703539 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703553 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703631 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703597 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703641 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703630 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703541 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1790703545 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703552 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703656 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703557 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703707 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703645 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703554 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703554 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703630 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1790703706 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1789479916 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1789479900 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1789479891 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1789482961 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1789478095 before *
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-122

References

ADP enrichment

CISA-ADP

No English description supplied.