cve.bz

CVE-2020-35457

7.8 highEPSS 0.6%

High (7.8) in gnome glib. EPSS 0.6% chance of exploitation in the next 30 days.

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWEs
CWE-190, CWE-787
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON