Unscored severity · published Mar 14, 2009
CVE-2008-4316
Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Multiple integer overflows in glib/gbase64.c in GLib before 2.20 allow context-dependent attackers to execute arbitrary code via a long string that is converted either (1) from or (2) to a base64 representation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GL
Glib · Gnome
through 2.16.4; 2.2.1; 2.14.5; 2.14.6; 2.16.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4316
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4316
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00014.html
lists.vmware.com
http://lists.vmware.com/pipermail/security-announce/2010/000082.html
Patch
http://ocert.org/patches/2008-015/glib-CVE-2008-4316.diff
Patch
http://openwall.com/lists/oss-security/2009/03/12/2
secunia.com
http://secunia.com/advisories/34267
secunia.com
http://secunia.com/advisories/34317
More from Glib
9.8
CVE-2025-14087
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
9.8
CVE-2024-52533
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character
9.8
CVE-2019-12450
file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress
9.8
CVE-2018-16428
In GNOME GLib 2.56.1, g_markup_parse_context_end_parse() in gmarkup.c has a NULL pointer dereference
9.1
CVE-2026-58016
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"