CVE-2025-3360

Impact

A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://access.redhat.com/security/cve/CVE-2025-3360
• https://bugzilla.redhat.com/show_bug.cgi?id=2357754
• https://gitlab.gnome.org/GNOME/glib/-/issues/3647
• https://lists.debian.org/debian-lts-announce/2025/04/msg00024.html
• https://cert-portal.siemens.com/productcert/html/ssa-089022.html
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html
• https://gitlab.gnome.org/GNOME/glib/-/work_items/3647