Signal is active with 1 mentions in latest observed window
Immediate actions
Patch affected systems immediately
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.
⚠️ Red Hat Enterprise Linux 10 alert: CVE-2026-16118 (CVSS 7.1)
Attackers could disrupt service or cause a denial of service.
Apply the vendor-recommended mitigation.
https://vulnipulse.com/advisories/linux-cve-2026-16118
#Linux#RedHatEnterpriseLinux10#CyberSecurity#CVE
Post summary
Red Hat issues an alert for CVE‑2026‑16118, a CVSS 7.1 denial‑of‑service flaw, advising users to apply vendor‑recommended mitigations to prevent service disruption.
🚨 HIGH - Heap buffer overflow in xdgmime MIME magic parsing (CVE-2026-16118)
A heap-based buffer overflow exists in xdgmime’s _xdg_mime_magic_parse_magic_line() when parsing MIME “magic” files used for content-type detection (often reached via GLib APIs like g_content_type_guess()) on little-endian systems. The root cause is incorrect pointer arithmetic during byte-swapping, resulting in a 2-byte out-of-bounds heap write (heap overflow). An attacker can exploit this by placing a crafted MIME magic file in a user-writable XDG data directory so that a victim application loads it during normal MIME type detection, with no elevated privileges required beyond the target user context. Successful exploitation can crash affected apps or corrupt memory, creating a potential path to code execution depending on allocator/layout and how the application uses the result.
👉 Affected: xdgmime (and consumers: glib2, webkitgtk4, webkit2gtk3) on little-endian systems, when attacker-controlled XDG data paths are in play | No fix yet - treat as suspicious
Post summary
This post discloses a heap‑buffer overflow in xdgmime’s MIME magic parsing that can be triggered by crafted files, potentially enabling local code execution on little‑endian systems; no patch exists yet.
