Details of issue NIXPKGS-2025-0008
affected
created 1 Nov 2025
NIXPKGS-2025-0008
A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.
Vulnerabilities
Related packages
pkgs.loupe
pkgs.rpm-ostree
pkgs.mlxbf-bootctl
Control BlueField boot partitions
-
nixos-unstable ???
- nixpkgs-unstable 2025-01-16
pkgs.systemd-bootchart
pkgs.rubyPackages.glib2
-
nixos-unstable ???
- nixpkgs-unstable glib2-4.3.3
pkgs.rubyPackages_3_1.glib2
-
nixos-unstable ???
- nixpkgs-unstable glib2-4.3.3
pkgs.rubyPackages_3_2.glib2
-
nixos-unstable ???
- nixpkgs-unstable glib2-4.3.3
pkgs.rubyPackages_3_3.glib2
-
nixos-unstable ???
- nixpkgs-unstable glib2-4.3.3
pkgs.rubyPackages_3_4.glib2
-
nixos-unstable ???
- nixpkgs-unstable glib2-4.3.3