CVE-2026-16118

HIGH 7.1

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

CVSS Score

7.1

EPSS Score

0.3%

EPSS Percentile

19th

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption.

CWE	CWE-122
Vendor	xdg
Product	xdgmime
Published	Jul 17, 2026
Last Updated	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for xdg xdgmime

Be the first to know when new high vulnerabilities affecting xdg xdgmime are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Affected Versions

xdg / xdgmime

All versions affected

Red Hat / Red Hat Enterprise Linux 10

All versions affected

Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support

All versions affected

Red Hat / Red Hat Enterprise Linux 8

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9

All versions affected

Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

All versions affected

Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.17

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.17

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.17

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.17

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.17

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.18

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.18

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.18

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.18

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.18

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Cert Manager support for Red Hat OpenShift release 1.20

All versions affected

Red Hat / Red Hat AI Inference Server 3.2

All versions affected

Red Hat / Red Hat AI Inference Server 3.2

All versions affected

Red Hat / Red Hat AI Inference Server 3.2

All versions affected

Red Hat / Red Hat AI Inference Server 3.5

All versions affected

Red Hat / Red Hat AI Inference Server 3.5

All versions affected

Red Hat / Red Hat AI Inference Server 3.5

All versions affected

Red Hat / Red Hat AI Inference Server 3.5

All versions affected

Red Hat / Red Hat AI Inference Server 3.5

All versions affected

Red Hat / Red Hat AI Inference Server 3.5

All versions affected

Red Hat / Red Hat Cost Management On-Premise 1

All versions affected

Red Hat / Red Hat OpenShift AI 3.0

All versions affected

Red Hat / Red Hat OpenShift AI 3.0

All versions affected

Red Hat / Red Hat OpenShift AI 3.0

All versions affected

Red Hat / Red Hat OpenShift AI 3.0

All versions affected

Red Hat / Red Hat OpenShift AI 3.0

All versions affected

Red Hat / Red Hat OpenShift AI 3.2

All versions affected

Red Hat / Red Hat OpenShift AI 3.2

All versions affected

Red Hat / Red Hat OpenShift AI 3.2

All versions affected

Red Hat / Red Hat OpenShift AI 3.2

All versions affected

Red Hat / Red Hat OpenShift AI 3.2

All versions affected

Red Hat / Red Hat OpenShift AI 3.2

All versions affected