CVE-2019-25085

A vulnerability was found in GNOME gvdb. It has been classified as critical. This affects the function gvdb_table_write_contents_async of the file gvdb-builder.c. The manipulation leads to use after free. It is possible to initiate the attack remotely. The name of the patch is d83587b2a364eb9a9a53be7e6a708074e252de14. It is recommended to apply a patch to fix this issue. The identifier VDB-216789 was assigned to this vulnerability.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@vuldb.com

Published

2022-12-26

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Gvariant Database (Gnome)
• Gvdb (Gnome)

References

• https://github.com/GNOME/gvdb/commit/d83587b2a364eb9a9a53be7e6a708074e252de14
• https://vuldb.com/?ctiid.216789
• https://vuldb.com/?id.216789