file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used. CREATE(Triage): {Link=https://nvd.nist.gov/vuln/detail/CVE-2019-12450 User=admin}