Integer Overflow Vulnerability in GNOME GLib by GNOME

CVE-2020-35457

What is CVE-2020-35457?

GNOME GLib versions before 2.65.3 contain an integer overflow that can lead to out-of-bounds writes during the use of the g_option_group_add_entries function. Although the vendor considers this not to be a significant security concern due to the typical usage pattern being to provide a predefined static list of option entries, this pattern remains undocumented. Such an oversight may expose applications utilizing this function to potential unforeseen behaviors, emphasizing the need for developers to be vigilant about version updates.

References