Integer Overflow and Buffer Under-read in GLib Affects Multiple Software Products

CVE-2025-3360

Summary

A security flaw exists within GLib related to an integer overflow and buffer under-read that occurs when the g_date_time_new_from_iso8601() function attempts to parse an excessively long, invalid ISO 8601 timestamp. This vulnerability could be exploited by attackers to manipulate memory contents, potentially leading to undefined behavior in affected applications.

References