CVE-2025-3360

Summary

A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.

Affected Software

Weaknesses

• CWE-190: Integer Overflow or Wraparound

Workarounds

Currently, no mitigation is available for this vulnerability.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://gitlab.gnome.org/GNOME/glib/-/work_items/3647

CVE Program Container

Additional References

• https://lists.debian.org/debian-lts-announce/2025/04/msg00024.html

References

• https://access.redhat.com/security/cve/CVE-2025-3360
• https://bugzilla.redhat.com/show_bug.cgi?id=2357754
• https://gitlab.gnome.org/GNOME/glib/-/issues/3647

• ←Previous
• Next→