CVE-2026-16118

Friday, July 17, 2026

7.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Summary

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.

Affected Software

Vendor	Product	Version Range	Status
Red Hat	Red Hat Enterprise Linux 10	`0:2.80.4-12.el10_2.22 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	`0:2.80.4-4.el10_0.18 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:2.56.4-178.el8_10 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:2.68.4-19.el9_8.10 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:2.68.4-19.el9_8.10 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	`0:2.68.4-7.el9_2.8 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	`0:2.68.4-14.el9_4.9 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	`0:2.68.4-16.el9_6.8 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790223279 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790223719 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790272426 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589998 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589912 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589914 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790589855 < *`	unaffected
Red Hat	Cert Manager support for Red Hat OpenShift release 1.20	`1790598593 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1790621714 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1790621718 < *`	unaffected
Red Hat	Red Hat AI Inference Server 3.2	`1790621713 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276886 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276884 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790277045 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276889 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.0	`1790276974 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703497 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703506 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703590 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703568 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703586 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.2	`1790703494 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703615 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703516 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703524 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703601 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703516 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703608 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703579 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.3	`1790703516 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703542 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703539 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703553 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703631 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703597 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703641 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703630 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703541 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1790703545 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703552 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703656 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703557 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703707 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703645 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703554 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703554 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703630 < *`	unaffected
Red Hat	Red Hat OpenShift AI 3.5	`1790703706 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1789479916 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1789479900 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1789479891 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1789482961 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1789478095 < *`	unaffected

Weaknesses

CWE-122: Heap-based Buffer Overflow

Workarounds

Do not install a MIME magic file or content from untrusted sources.

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: poc
- Automatable: no
- Technical Impact: partial

Additional References

https://gitlab.freedesktop.org/xdg/xdgmime/-/work_items/41

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.