EUVD-2025-18285
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Lifecycle Timeline
4Description
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
Analysis
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
Technical Context
An integer overflow occurs when an arithmetic operation produces a value that exceeds the maximum (or minimum) size of the integer type used to store it. This vulnerability is classified as Integer Overflow or Wraparound (CWE-190).
Affected Products
Affected products: Gnome Glib
Remediation
Use safe integer arithmetic libraries. Check for overflow conditions before operations. Use appropriately sized integer types.
Priority Score
Vendor Status
Ubuntu
Priority: Low| Release | Status | Version |
|---|---|---|
| upstream | released | 2.84.3-1 |
| bionic | not-affected | - |
| focal | not-affected | - |
| jammy | not-affected | 2.72.4-0ubuntu2.5 |
| trusty | not-affected | - |
| xenial | not-affected | - |
| oracular | ignored | end of life, was needed |
| noble | released | 2.80.0-6ubuntu3.6 |
| plucky | released | 2.84.1-1ubuntu0.2 |
| questing | not-affected | 2.84.3-1 |
Debian
Bug #1107797| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye | not-affected | - | - |
| bullseye (security) | fixed | 2.66.8-1+deb11u8 | - |
| bookworm | not-affected | - | - |
| bookworm (security) | fixed | 2.74.6-2+deb12u2 | - |
| trixie | fixed | 2.84.4-3~deb13u2 | - |
| forky, sid | fixed | 2.87.2-3 | - |
| (unstable) | fixed | 2.84.3-1 | unimportant |
Share
External POC / Exploit Code
Leaving vuln.today