A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-110877 advisory.

    A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in
    _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-     controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic     path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When     performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2     bytes, resulting in an application crash or memory corruption.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109813 advisory.

    A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in
    _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-     controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic     path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When     performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2     bytes, resulting in an application crash or memory corruption.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1820:16 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1826:17 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66451 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66451 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664510 advisory.

    [2.56.4-178]
    - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime magic parsing

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66451 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64800 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-648000 advisory.

    [2.68.4-19.10]
    - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:64800 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:64799 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64799 advisory.

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647990 advisory.

    - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap
    - Fix CVE-2026-15588: limit D-Bus auth line read length
    - Fix CVE-2026-58011: range validation in g_date_time_add_full()
    - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW
    - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking
    - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context
    - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list
    - Fix CVE-2026-58013: GIOChannel memcmp buffer over-read
    - Fix CVE-2026-58016: D-Bus introspection XML node nesting validation

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64800 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64799 advisory.

    GLib provides the core application building blocks for libraries and applications written in C. It     provides the core object system used in GNOME, the main loop implementation, and a large set of utility     functions for strings and common data structures.

    Security Fix(es):

    * xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c     (CVE-2026-16118)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2028 advisory.

    A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in
    _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-     controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic     path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When     performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2     bytes, resulting in an application crash or memory corruption. (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of webkitgtk4 installed on the remote host is prior to 2.52.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3843 advisory.

    A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in
    _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-     controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic     path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When     performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2     bytes, resulting in an application crash or memory corruption. (CVE-2026-16118)

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2     and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an     unexpected process crash. (CVE-2026-39872)

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2     and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an     unexpected process crash. (CVE-2026-43663)

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected Safari crash. (CVE-2026-43676)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected process crash. (CVE-2026-43699)

    The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 26.5.2 and iPadOS     26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content outside the     sandbox. (CVE-2026-43701)

    A type confusion issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS     26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to     memory corruption. (CVE-2026-43705)

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected process crash. (CVE-2026-43707)

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2     and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an     unexpected process crash. (CVE-2026-43712)

    A permissions issue was addressed with additional restrictions. This issue is fixed in Safari 26.5.2, iOS     26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Visiting a website may leak sensitive data. (CVE-2026-43713)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to memory corruption. (CVE-2026-43715)

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2     and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may lead to an     unexpected Safari crash. (CVE-2026-43716)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected Safari crash. (CVE-2026-43720)

    The issue was addressed with improved input validation. This issue is fixed in Safari 26.5.2, iOS 26.5.2     and iPadOS 26.5.2, macOS Tahoe 26.5.2. A malicious website may be able to process restricted web content     outside the sandbox. (CVE-2026-43725)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected process crash. (CVE-2026-43726)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected Safari crash. (CVE-2026-43727)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to memory corruption. (CVE-2026-43731)

    A path handling issue was addressed with improved validation. This issue is fixed in Safari 26.5.2, iOS     26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may disclose     sensitive user information. (CVE-2026-43732)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected process crash. (CVE-2026-43734)

    The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5.2, iOS 26.5.2     and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may result in the     disclosure of process memory. (CVE-2026-43740)

    A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected process crash. (CVE-2026-43742)

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Safari     26.5.2, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. Processing maliciously crafted web content may     lead to an unexpected Safari crash. (CVE-2026-43745)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3850 advisory.

    A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in
    _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-     controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic     path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When     performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2     bytes, resulting in an application crash or memory corruption. (CVE-2026-16118)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in
    _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-     controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic     path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When     performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2     bytes, resulting in an application crash or memory corruption. (CVE-2026-16118)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
348266	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-110877)	Nessus	Unity Linux Local Security Checks	Local	high
347013	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glib2 (UTSA-2026-109813)	Nessus	Unity Linux Local Security Checks	Local	high
345662	MiracleLinux 9 : glib2-2.68.4-19.el9_8.10 (AXSA:2026-1820:16)	Nessus	Miracle Linux Local Security Checks	Local	high
345660	MiracleLinux 8 : glib2-2.56.4-178.el8_10 (AXSA:2026-1826:17)	Nessus	Miracle Linux Local Security Checks	Local	high
345616	AlmaLinux 8 : glib2 (ALSA-2026:66451)	Nessus	Alma Linux Local Security Checks	Local	high
344827	RockyLinux 8 : glib2 (RLSA-2026:66451)	Nessus	Rocky Linux Local Security Checks	Local	high
344786	Oracle Linux 8 : ELSA-2026-66451-0: / glib2 (ELSA-2026-664510)	Nessus	Oracle Linux Local Security Checks	Local	high
344772	RHEL 8 : glib2 (RHSA-2026:66451)	Nessus	Red Hat Local Security Checks	Local	high
344332	AlmaLinux 9 : glib2 (ALSA-2026:64800)	Nessus	Alma Linux Local Security Checks	Local	high
344283	Oracle Linux 9 : ELSA-2026-64800-0: / glib2 (ELSA-2026-648000)	Nessus	Oracle Linux Local Security Checks	Local	high
344065	RockyLinux 9 : glib2 (RLSA-2026:64800)	Nessus	Rocky Linux Local Security Checks	Local	high
344059	RockyLinux 10 : glib2 (RLSA-2026:64799)	Nessus	Rocky Linux Local Security Checks	Local	high
344045	AlmaLinux 10 : glib2 (ALSA-2026:64799)	Nessus	Alma Linux Local Security Checks	Local	high
343907	Oracle Linux 10 : ELSA-2026-64799-0: / glib2 (ELSA-2026-647990)	Nessus	Oracle Linux Local Security Checks	Local	high
343854	RHEL 9 : glib2 (RHSA-2026:64800)	Nessus	Red Hat Local Security Checks	Local	high
343815	RHEL 10 : glib2 (RHSA-2026:64799)	Nessus	Red Hat Local Security Checks	Local	high
332052	Amazon Linux 2023 : glib2, glib2-devel, glib2-static (ALAS2023-2026-2028)	Nessus	Amazon Linux Local Security Checks	Local	high
332028	Amazon Linux 2 : webkitgtk4, --advisory ALAS2-2026-3843 (ALAS-2026-3843)	Nessus	Amazon Linux Local Security Checks	Local	high
331979	Amazon Linux 2 : glib2, --advisory ALAS2-2026-3850 (ALAS-2026-3850)	Nessus	Amazon Linux Local Security Checks	Local	high
327697	Linux Distros Unpatched Vulnerability : CVE-2026-16118	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-16118

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high