GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-12-14T22:25:09

Updated: 2024-08-04T17:02:07.975Z

Reserved: 2020-12-14T00:00:00

Link: CVE-2020-35457

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-12-14T23:15:12.173

Modified: 2024-11-21T05:27:19.393

Link: CVE-2020-35457

cve-icon Redhat

No data.