JLSEC-2025-155
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-155.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-155.json
- JSON Data
- https://api.osv.dev/v1/vulns/JLSEC-2025-155
- Upstream
- Published
- 2025-10-19T22:31:43.957Z
- Modified
- 2026-07-23T22:30:11.926220267Z
- Severity
-
- 4.6 (Medium) CVSS_V2 - AV:L/AC:L/Au:N/C:P/I:P/A:P CVSS Calculator
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in...
- Details
-
GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in
g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls tog_option_group_add_entries()." The researcher states that this pattern is undocumented - Database specific
{ "license": "CC-BY-4.0", "sources": [ { "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35457", "database_specific": { "tags": [ { "sourceIdentifier": "cve@mitre.org", "tags": [ "disputed" ] } ], "status": "Modified" }, "modified": "2026-06-17T03:13:44.550Z", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2020-35457", "imported": "2026-07-17T20:39:00.470Z", "id": "CVE-2020-35457", "published": "2020-12-14T23:15:12.173Z" } ] }- References