CVE-2020-35457 Integer overflow in n/a
An integer overflow in GLib's option group handling may lead to an out-of-bounds write, potentially allowing code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-35457?
CVE-2020-35457 is a high-severity vulnerability in n/a, published on 14 Dec 2020. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls to g_option_group_add_entries()." The researcher states that this pattern is undocumented
Which versions are affected by CVE-2020-35457?
It affects 1 product.
Products include Gnome Glib.
How do I fix CVE-2020-35457?
Upgrade to a fixed version.
Is CVE-2020-35457 being exploited?
There is no known exploitation of CVE-2020-35457 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2009-3289 Privilege escalation in n/a
- CVE-2025-13601 Glib: integer overflow in in g_escape_uri_string()
- CVE-2026-58016 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- CVE-2025-4056 Glib: glib crash after long command line
- CVE-2019-13012 Misconfiguration in n/a
Sources
Also known as AZL-6435, CLSA-2025-1758705181, CLSA-2025-1758709468, CLSA-2025-1763023946, CLSA-2026-1777391919, CLSA-2026-1777392531 and 3 more.