glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

An integer wraparound was discovered in glib due to passing a 64 bit sized value to function gmemdup which accepts a 32 bits number as argument. An attacker may abuse this flaw when an application linked against the glib library uses gbytesnew function or possibly other functions that use gmemdup...

PT-2021-30841

Name of the Vulnerable Software and Affected Versions GLib versions prior to 2.66.7 GLib versions prior to 2.70 Description The issue concerns several problems in GLib, including silent integer truncation and heap overflow in g memdup, issues with handling over-long input when parsing for GDate,...