CVE-2020-35457

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries

published December 14, 2020

CVSS
—
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00574 · 46.6th percentile
Published
2020-12-14T22:25Z
EPSS history
Timeline
  • 14 DEC 22:25Z
    GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries
    cvelistv5