Findings

CVE-2024-52533

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Published Nov 11, 2024 · updated Oct 15, 2026 · gnome glib

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Timeline

Detection, updates, and resolution for this record.

  1. Nov 11, 2024 · NIST NVD

    Detected

    gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

  2. Oct 15, 2026 · NIST NVD

    Updated

    gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Affected

  • cpe debian/debian linux11.0
  • cpe gnome/glibversion unspecified
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/ontap tools10

Sources

  • CVE.orgCVE-2024-52533

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2024-52533

    gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

    nvd.nist.gov

References