IM
IronMonkey Threat Research

CVE-2025-3360 LOW

Published: 2025-04-07 | Last Modified: 2026-06-30 | Status: Deferred

Description

A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.

Additional Descriptions (1)

Se detectó una falla en GLib. Se produce un desbordamiento de enteros y una lectura insuficiente del búfer al analizar una marca de tiempo ISO 8601 larga e inválida con la función g_date_time_new_from_iso8601().

CVSS Metrics

Base Score: 3.7 (LOW)

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactLOW

Source: [email protected]

Type: Secondary

Exploitability Score: 2.2

Impact Score: 1.4

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-190