GLib Integer Overflow and Buffer Under-Read Vulnerability in ISO 8601 Timestamp Parsing

A vulnerability exists in GLib versions prior to 2.82.5, where an integer overflow and buffer under-read occur in the function g_date_time_new_from_iso8601() when processing a long invalid ISO 8601 timestamp. This flaw can lead to potential memory corruption or other unintended behavior.

Impact

Exploitation of this vulnerability can cause an integer overflow, leading to a buffer under-read, which may result in memory corruption or other unintended behaviors.

Remediation

Users can upgrade to GLib version 2.82.5 or later to address this vulnerability. For Debian 11 (bullseye) users, the issue has been fixed in version 2.66.8-1+deb11u6.