CVE-2025-3360: Glibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().
A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the gdatetimenewfromiso8601() function.
Other sources
GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with gdatetimenewfromiso8601().
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.78.6-2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.71.0-5
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3360?
CVE-2025-3360 has been classified as a moderate severity vulnerability due to the potential impact of integer overflow and buffer under-read.
How do I fix CVE-2025-3360?
To mitigate CVE-2025-3360, upgrade GLib to version 2.82.5 or later, which includes the necessary security patches.
What type of vulnerability is CVE-2025-3360?
CVE-2025-3360 is categorized as a vulnerability involving integer overflow and buffer under-read during timestamp parsing.
Which versions of GLib are affected by CVE-2025-3360?
GLib versions prior to 2.82.5 are affected by CVE-2025-3360.
What functions are associated with CVE-2025-3360?
The vulnerability occurs in the g_date_time_new_from_iso8601() function when processing long invalid ISO 8601 timestamps.