Glib Buffer Underflow Vulnerability in Content Type Parsing Leading to Local Denial-of-Service

A buffer underflow vulnerability has been identified in Glib's content type parsing. This issue arises because the length of header lines is stored in a signed integer, which can cause integer wraparound with very large inputs. The resulting pointer underflow allows for out-of-bounds memory access. Exploitation of this vulnerability requires a local user to process a specially crafted treemagic file, potentially leading to a local denial-of-service or application instability.

Impact

Exploitation of this vulnerability can cause a local denial-of-service by crashing the application or creating instability. However, according to Red Hat, if the corrupted memory can be controlled, it may allow for arbitrary code execution.