CVE-2020-35457

Katalog CVE

CVSS 7.8 · High EPSS 0,57%

Kerentanan Integer Overflow or Wraparound pada gnome glib. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented

Rincian

Terbit di NVD

14 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,57% peluang dieksploitasi; lebih tinggi dari 45,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.gnome.org/GNOME/glib/-/commit/63c5b62f0a984fac9a9700b12f54fe878e016a5d patch · advisory vendor
• https://gitlab.gnome.org/GNOME/glib/-/issues/2197 exploit · advisory vendor
• https://gitlab.gnome.org/GNOME/glib/-/releases/2.65.3 release notes · advisory vendor