A flaw in GLib’s GIO library introduces a state‑confusion issue in g_dbus_node_info_new_for_xml() when it parses malformed D‑Bus introspection XML, specifically when a <node> element is nested within elements like <method>, <signal>, <property> or <arg>. This can trigger an unsigned integer overflow and lead to an out‑of‑bounds read, which may crash the application, resulting in a denial of service. The weakness is identified as a type conversion error (CWE‑191).

The vulnerability affects systems that ship GLib with the GIO library, notably Red Hat Enterprise Linux distributions from version 6 through 10 and Red Hat Hardened Images. Any software on these platforms that processes D‑Bus introspection XML is potentially exposed.

The CVSS score of 7.5 indicates a high severity, and the EPSS score of < 1% indicates a very low likelihood of exploitation. The CWE indicates that the flaw resides in handling of data. Based on the description, it is inferred that an attacker who can supply malformed D‑Bus introspection XML—either locally or remotely—to an application using g_dbus_node_info_new_for_xml() could trigger the overflow and crash it. No additional privileges or external infrastructure are required beyond the ability to deliver the crafted XML. The vulnerability is not listed in CISA's KEV catalog.