CVE-2024-52533
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
Published Nov 11, 2024 · updated Oct 15, 2026 · gnome glib
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
Timeline
Detection, updates, and resolution for this record.
Nov 11, 2024 · NIST NVD
Detected
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
Oct 15, 2026 · NIST NVD
Updated
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
Affected
- cpe debian/debian linux11.0
- cpe gnome/glibversion unspecified
- cpe netapp/active iq unified managerversion unspecified
- cpe netapp/ontap tools10
Sources
- CVE.orgCVE-2024-52533
Official CVE identifier
cve.org - NIST NVDCVE-2024-52533
gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.
nvd.nist.gov