CVE Catalog
CVE-2024-52533
MediumSummary
In GNOME GLib before 2.82.1, the file gio/gsocks4aproxy.c has an off-by-one error leading to a buffer overflow because SOCKS4_CONN_MSG_LEN is insufficient for a trailing null character.
Risk Assessment
This vulnerability could allow a remote attacker to trigger a buffer overflow, potentially causing application crashes or arbitrary code execution.
Recommendation
Update GLib to version 2.82.1 or later, which fixes the buffer length issue for SOCKS4 connections.
Original NVD description (English source)
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.