{"id":"CVE-2025-3360","aliases":["AZL-59585","AZL-59591","BELL-CVE-2025-3360","DEBIAN-CVE-2025-3360","DLA-4128-1","EUVD-2025-10006","GHSA-3435-f6h9-64p7","MGASA-2026-0023","OESA-2025-1525","SUSE-SU-2025:01599-1","SUSE-SU-2025:1367-1","SUSE-SU-2025:1457-1","SUSE-SU-2025:20318-1","SUSE-SU-2025:20471-1","UBUNTU-CVE-2025-3360","USN-7942-1","openSUSE-SU-2025:15007-1"],"status":"published","title":"Glibc: glib prior to 2.82.5 is vulnerable to integer  overflow and buffer under-read when parsing a very long invalid iso  8601 timestamp with g_date_time_new_from_iso8601().","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","severity":{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00662,"percentile":0.52003,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-04-07T05:58:26.859172Z","modified":"2026-11-06T14:50:55Z","fixes":[{"ecosystem":"Azure Linux:2","package":"glib","fixed_in":["2.71.0-5"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"glib","fixed_in":["2.78.6-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"glib","fixed_in":["2.74.7-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"glib","fixed_in":["2.84.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glib2.0","fixed_in":["2.74.6-2+deb12u6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glib2.0","fixed_in":["2.84.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glib2.0","fixed_in":["2.84.1-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"glib2.0","fixed_in":["2.66.8-1+deb11u6"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"glib2","fixed_in":["2.72.2-21.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"glib2","fixed_in":["2.78.3-8.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"glib2","fixed_in":["2.78.3-8.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"glib2","fixed_in":["2.66.8-19.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"glib2","fixed_in":["2.72.2-21.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"glib2","fixed_in":["2.70.5-150400.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"glib2","fixed_in":["2.70.5-150400.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"glib2","fixed_in":["2.70.5-150400.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"glib2","fixed_in":["2.78.6-150600.4.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"glib2","fixed_in":["2.78.6-150600.4.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"glib2-doc","fixed_in":["2.78.6-150600.4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"glib2","fixed_in":["2.62.6-150200.3.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"glib2","fixed_in":["2.62.6-150200.3.27.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"glib2","fixed_in":["2.76.2-7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glib2.0","fixed_in":["2.56.4-0ubuntu0.18.04.9+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"glib2.0","fixed_in":["2.64.6-1~ubuntu20.04.9+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"glib2.0","fixed_in":["2.72.4-0ubuntu2.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"glib2.0","fixed_in":["2.80.0-6ubuntu3.6"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"glib2","fixed_in":["2.84.1-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71.0-5"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78.6-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.74.1-r2"},{"fixed":"2.74.7-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.76.0-r1"},{"fixed":"2.84.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.6-2+deb12u6"}]}],"versions":["2.74.6-2","2.74.6-2+deb12u1","2.74.6-2+deb12u2","2.74.6-2+deb12u3","2.74.6-2+deb12u4","2.74.6-2+deb12u5"]},{"source":"osv","ecosystem":"Debian:13","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84.1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.66.8-1+deb11u6"}]}],"versions":["2.66.8-1","2.66.8-1+deb11u1","2.66.8-1+deb11u2","2.66.8-1+deb11u3","2.66.8-1+deb11u4","2.66.8-1+deb11u5"]},{"source":"osv","ecosystem":"Mageia:9","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.3-1.6.mga9"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.2-21.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78.3-8.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78.3-8.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.66.8-19.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.2-21.oe2203sp3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.5-150400.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.5-150400.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.5-150400.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78.6-150600.4.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78.6-150600.4.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78.6-150600.4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.6-150200.3.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.6-150200.3.27.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.76.2-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.78.6-slfo.1.1_3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-0ubuntu0.18.04.9+esm5"}]}],"versions":["2.54.1-1ubuntu1","2.55.2-2ubuntu1","2.56.0-2ubuntu1","2.56.0-4ubuntu1","2.56.1-2ubuntu1","2.56.2-0ubuntu0.18.04.1","2.56.2-0ubuntu0.18.04.2","2.56.3-0ubuntu0.18.04.1","2.56.4-0ubuntu0.18.04.2","2.56.4-0ubuntu0.18.04.3","2.56.4-0ubuntu0.18.04.4","2.56.4-0ubuntu0.18.04.5","2.56.4-0ubuntu0.18.04.6","2.56.4-0ubuntu0.18.04.7","2.56.4-0ubuntu0.18.04.8","2.56.4-0ubuntu0.18.04.9","2.56.4-0ubuntu0.18.04.9+esm3","2.56.4-0ubuntu0.18.04.9+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.6-1~ubuntu20.04.9+esm1"}]}],"versions":["2.62.1-1","2.63.1-2","2.63.1-2ubuntu1","2.63.3-1","2.63.3-3","2.63.5-2","2.64.0-1","2.64.1-1","2.64.2-1~fakesync1","2.64.3-1~ubuntu20.04.1","2.64.6-1~ubuntu20.04.1","2.64.6-1~ubuntu20.04.2","2.64.6-1~ubuntu20.04.3","2.64.6-1~ubuntu20.04.4","2.64.6-1~ubuntu20.04.6","2.64.6-1~ubuntu20.04.7","2.64.6-1~ubuntu20.04.8","2.64.6-1~ubuntu20.04.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.4-0ubuntu2.7"}]}],"versions":["2.68.4-1ubuntu1","2.70.1-1","2.70.2-1","2.71.0-2","2.71.1-1","2.71.2-1","2.71.3-1","2.72.0-1","2.72.1-1","2.72.4-0ubuntu1","2.72.4-0ubuntu2","2.72.4-0ubuntu2.2","2.72.4-0ubuntu2.3","2.72.4-0ubuntu2.4","2.72.4-0ubuntu2.5","2.72.4-0ubuntu2.6"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80.0-6ubuntu3.6"}]}],"versions":["2.78.0-2","2.78.1-4","2.78.3-1","2.78.3-2","2.79.1-1","2.79.2-1~ubuntu1","2.79.3-3ubuntu5","2.80.0-6ubuntu1","2.80.0-6ubuntu3","2.80.0-6ubuntu3.1","2.80.0-6ubuntu3.2","2.80.0-6ubuntu3.4","2.80.0-6ubuntu3.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.4-0ubuntu2.7"}]}],"versions":["2.68.4-1ubuntu1","2.70.1-1","2.70.2-1","2.71.0-2","2.71.1-1","2.71.2-1","2.71.3-1","2.72.0-1","2.72.1-1","2.72.4-0ubuntu1","2.72.4-0ubuntu2","2.72.4-0ubuntu2.2","2.72.4-0ubuntu2.3","2.72.4-0ubuntu2.4","2.72.4-0ubuntu2.5","2.72.4-0ubuntu2.6"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.80.0-6ubuntu3.6"}]}],"versions":["2.78.0-2","2.78.1-4","2.78.3-1","2.78.3-2","2.79.1-1","2.79.2-1~ubuntu1","2.79.3-3ubuntu5","2.80.0-6ubuntu1","2.80.0-6ubuntu3","2.80.0-6ubuntu3.1","2.80.0-6ubuntu3.2","2.80.0-6ubuntu3.4","2.80.0-6ubuntu3.5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.86.0-2ubuntu0.1"}]}],"versions":["2.84.1-1","2.84.1-2","2.84.2-1","2.84.3-1","2.85.1-2","2.85.2-2","2.85.3-1","2.86.0-2"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.84.1-2.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"siemens","product":"ruggedcom rst2428p"},{"vendor":"siemens","product":"scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family"},{"vendor":"siemens","product":"scalance xch328"},{"vendor":"siemens","product":"scalance xcm324"},{"vendor":"siemens","product":"scalance xcm328"},{"vendor":"siemens","product":"scalance xcm332"},{"vendor":"siemens","product":"scalance xrh334 (24 v dc, 8xfo, cc)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230v ac, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24v dc, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230v ac, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-3360","tags":["vdb-entry","x_refsource_REDHAT","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357754","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.gnome.org/GNOME/glib/-/issues/3647","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/glib/-/work_items/3647","tags":["exploit","evidence"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00024.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3360","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-3435-f6h9-64p7"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-3360","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/3xxx/CVE-2025-3360.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/glib","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-3360","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0023.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35052","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7971-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1525","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501599-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240897","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3360","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251367-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251457-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520318-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520471-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1231463","tags":["report"]},{"url":"https://bugzilla.suse.com/1242844","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4373","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-3360","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3360","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7942-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7942-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-6052","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-7039","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-13601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-14087","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-3360","title":"Glibc: glib prior to 2.82.5 is vulnerable to integer  overflow and buffer under-read when parsing a very long invalid iso  8601 timestamp with g_date_time_new_from_iso8601().","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T12:53:55.924Z","modified":"2026-11-06T14:50:55.995Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-06T15:28:32.799664Z"}],"euvd":[{"id":"EUVD-2025-10006","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T12:53:55Z","modified":"2026-11-06T14:50:55Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-06T16:05:20.373498Z"}],"ghsa":[{"id":"GHSA-3435-f6h9-64p7","title":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long...","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T15:31:21Z","modified":"2026-10-15T03:35:48Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:13:33.329835Z"}],"nvd":[{"id":"CVE-2025-3360","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T13:15:43.687Z","modified":"2026-11-06T15:17:05.11Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-06T18:00:49.930273Z"}],"osv":[{"id":"BELL-CVE-2025-3360","status":"published","published":"2025-04-07T05:58:26.859172Z","modified":"2026-01-26T09:39:08.216246Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-3360","title":"Glibc: glib prior to 2.82.5 is vulnerable to integer  overflow and buffer under-read when parsing a very long invalid iso  8601 timestamp with g_date_time_new_from_iso8601().","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T12:53:55.924Z","modified":"2026-11-08T02:30:51.32687719Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-190"],"updated_at":"2026-11-07T03:07:56.270712Z"},{"id":"DEBIAN-CVE-2025-3360","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T13:15:43.687Z","modified":"2026-11-07T09:47:29.565195567Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2025-1525","title":"glib2 security update","description":"GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib\u0026amp;apos;s code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.(CVE-2025-3360)","status":"published","published":"2025-05-16T11:08:37Z","modified":"2026-08-18T01:17:57.912160272Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2025-3360","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T13:15:00Z","modified":"2026-04-22T15:43:03.118034Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"AZL-59585","title":"CVE-2025-3360 affecting package glib for versions less than 2.71.0-5","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T13:15:43Z","modified":"2026-04-21T04:37:17.875402Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-59591","title":"CVE-2025-3360 affecting package glib for versions less than 2.78.6-2","description":"A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.","status":"published","published":"2025-04-07T13:15:43Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"DLA-4128-1","title":"glib2.0 - security update","status":"published","published":"2025-04-13T00:00:00Z","modified":"2026-03-09T01:22:35.08166Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2026-0023","title":"Updated glib2.0 packages fix security vulnerabilities","description":"Glib prior to 2.82.5 is vulnerable to integer overflow and buffer\nunder-read when parsing a very long invalid iso 8601 timestamp with\ng_date_time_new_from_iso8601(). (CVE-2025-3360)\nBuffer under-read on glib through glib/gfileutils.c via get_tmp_file().\n(CVE-2025-7039)\nInteger overflow in g_escape_uri_string(). (CVE-2025-13601)\nBuffer underflow in gvariant parser leads to heap corruption.\n(CVE-2025-14087)\nInteger overflow in glib gio attribute escaping causes heap buffer\noverflow. (CVE-2025-14512)\nDenial of service via integer overflow in\ng_buffered_input_stream_peek(). (CVE-2026-0988)\n","status":"published","published":"2026-01-28T22:42:14Z","modified":"2026-04-16T04:41:37.109446441Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15007-1","title":"gio-branding-upstream-2.84.1-2.1 on GA media","description":"These are all security issues fixed in the gio-branding-upstream-2.84.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-17T00:00:00Z","modified":"2026-02-04T02:17:43.119429Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01599-1","title":"Security update for glib2","description":"This update for glib2 fixes the following issues:\n\n- CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long \n  and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897)\n","status":"published","published":"2025-05-20T10:52:51Z","modified":"2026-02-04T02:59:01.369783Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1367-1","title":"Security update for glib2","description":"This update for glib2 fixes the following issues:\n\n- CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long \n  and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897)\n","status":"published","published":"2025-04-24T14:38:49Z","modified":"2026-02-04T02:43:31.70997Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1457-1","title":"Security update for glib2","description":"This update for glib2 fixes the following issues:\n\n- CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long \n  and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897)\n","status":"published","published":"2025-05-05T10:56:39Z","modified":"2026-03-23T04:47:05.282061Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20318-1","title":"Security update for glib2","description":"This update for glib2 fixes the following issues:\n\n- CVE-2025-3360: Fixed integer overflow and buffer underread when \n  parsing a very long and invalid ISO 8601 timestamp with \n  g_date_time_new_from_iso8601() (bsc#1240897).\n","status":"published","published":"2025-05-12T09:55:56Z","modified":"2026-03-23T04:48:55.608132Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20471-1","title":"Security update for glib2","description":"This update for glib2 fixes the following issues:\n\nSecurity issues:\n\n- CVE-2025-4373: Fixed handling gssize parameters (bsc#1242844).\n- CVE-2025-3360: Fixed integer overflow and buffer underread\n  when parsing a very long and invalid ISO 8601 timestamp with\n  g_date_time_new_from_iso8601 (bsc#1240897)\n\nNon security issues:\n\n- Trigger glib2-tools postun trigger exit normally if\n  glib2-compile-schemas can't be run. Fixes error when uninstalling if\n  libgio is uninstalled first (bsc#1231463).\n","status":"published","published":"2025-07-07T11:10:43Z","modified":"2026-03-23T04:47:14.774562Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7942-1","title":"glib2.0 vulnerabilities","description":"It was discovered that GLib incorrectly handled escaping URI strings. An\nattacker could use this issue to cause GLib to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2025-13601)\n\nIt was discovered that GLib incorrectly parsed certain GVariants. An\nattacker could use this issue to cause GLib to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2025-14087)\n\nIt was discovered that GLib incorrectly parsed certain long invalid ISO\n8601 timestamps. An attacker could possibly use this issue to cause GLib to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-3360)\n\nIt was discovered that GLib incorrectly handled GString memory operations.\nAn attacker could use this issue to cause GLib to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 24.04 LTS and Ubuntu 25.04. (CVE-2025-6052)\n\nIt was discovered that GLib incorrectly handled creating temporary files.\nAn attacker could possibly use this issue to access unauthorized data. This\nissue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 25.04.\n(CVE-2025-7039)","status":"published","published":"2026-01-06T15:17:45Z","modified":"2026-04-22T11:04:08.476133Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}