Description
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.
Published: 2026-07-17
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Workaround

Do not install a MIME magic file or content from untrusted sources.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8794-1 GLib vulnerabilities
References
Link Providers
https://access.redhat.com/errata/RHSA-2026:64799 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:64800 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:66451 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:67956 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:70636 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:71403 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:71404 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:71405 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72394 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72395 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72399 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72470 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72475 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72476 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:72502 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73859 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73909 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73929 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73930 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73959 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73960 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73961 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:73962 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74359 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74360 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74361 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74362 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74363 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74364 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74365 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74450 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74458 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74459 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74460 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74461 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74462 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74463 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74674 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74677 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74678 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74679 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74681 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74683 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74685 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74687 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74688 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:74771 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75652 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75654 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75655 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75657 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75658 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75659 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:75660 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2026-16118 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2501732 cve-icon cve-icon
https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41 cve-icon cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-16118 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-16118 cve-icon
History

Mon, 05 Oct 2026 11:00:00 +0000


Fri, 02 Oct 2026 02:45:00 +0000


Thu, 01 Oct 2026 17:30:00 +0000


Thu, 01 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
References

Thu, 01 Oct 2026 11:00:00 +0000


Wed, 30 Sep 2026 17:00:00 +0000


Wed, 30 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat ai Inference Server
CPEs cpe:/a:redhat:ai_inference_server:3.2::el9
Vendors & Products Redhat ai Inference Server
References

Tue, 29 Sep 2026 01:00:00 +0000

Type Values Removed Values Added
References

Mon, 28 Sep 2026 14:30:00 +0000


Mon, 28 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
References

Mon, 28 Sep 2026 08:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat cert Manager
CPEs cpe:/a:redhat:cert_manager:1.20::el9
Vendors & Products Redhat cert Manager
References

Thu, 24 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.6::appstream
cpe:/a:redhat:rhel_eus:9.6::crb
cpe:/o:redhat:rhel_eus:9.6::baseos
Vendors & Products Redhat rhel Eus
References

Thu, 24 Sep 2026 10:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
References

Thu, 24 Sep 2026 08:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Eus
CPEs cpe:/o:redhat:enterprise_linux_eus:10.0
Vendors & Products Redhat enterprise Linux Eus
References

Wed, 23 Sep 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel E4s
CPEs cpe:/a:redhat:rhel_e4s:9.4::appstream
cpe:/o:redhat:rhel_e4s:9.4::baseos
Vendors & Products Redhat rhel E4s
References

Mon, 21 Sep 2026 12:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhui
CPEs cpe:/a:redhat:rhui:5::el9
Vendors & Products Redhat rhui
References

Fri, 11 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:8::crb
cpe:/o:redhat:enterprise_linux:8::baseos
References

Tue, 08 Sep 2026 12:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/o:redhat:enterprise_linux:9::baseos
References

Tue, 08 Sep 2026 08:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:10.2
References

Wed, 22 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Sat, 18 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

threat_severity

Moderate


Fri, 17 Jul 2026 20:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.
Title Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
First Time appeared Redhat
Redhat enterprise Linux
Weaknesses CWE-122
CPEs cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H'}


Subscriptions

Redhat Ai Inference Server Cert Manager Enterprise Linux Enterprise Linux Eus Openshift Ai Rhel E4s Rhel Eus Rhui
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-05T14:05:25.002Z

Reserved: 2026-07-17T15:50:21.345Z

Link: CVE-2026-16118

cve-icon Vulnrichment

Updated: 2026-07-22T18:18:34.443Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-07-17T20:17:16.167

Modified: 2026-10-05T11:16:47.887

Link: CVE-2026-16118

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-07T00:00:00Z

Links: CVE-2026-16118 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-02T20:35:57Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow