CRITICAL 9.8 Microsoft

CVE-2024-52533

gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Microsoft Security Update 2024-Nov: gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.

Affected Products

cbl2 glib 2.71.0-3 on CBL Mariner 2.0
azl3 glib 2.78.1-5 on Azure Linux 3.0
cbl2 glib 2.71.0-4 on CBL Mariner 2.0
azl3 glib 2.78.6-1 on Azure Linux 3.0
cbl2 glib 2.71.0-4 on CBL-Mariner 2.0

References

Published: 2024-11-12 · Source: Microsoft · Feed updated: 2026-10-05

This critical severity vulnerability with a CVSS score of 9.8 was published on 2024-11-12 via Microsoft. Affected: cbl2 glib 2.71.0-3 on CBL Mariner 2.0, azl3 glib 2.78.1-5 on Azure Linux 3.0, cbl2 glib 2.71.0-4 on CBL Mariner 2.0 and 2 more.

Risk Timeline

CVE Disclosed2024-11-12 · 691 days ago

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2024-52533

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2024-52533

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2022-49043	xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.	CRITICAL	10.0
CVE-2024-41110 PoC	Moby authz zero length regression	CRITICAL	9.9
CVE-2025-62878	Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern	CRITICAL	9.9
CVE-2023-24531	Output of "go env" does not sanitize values in cmd/go	CRITICAL	9.8
CVE-2025-1744	Out-of-bounds Write in radare2	CRITICAL	9.8
CVE-2024-11236	Integer overflow in the firebird and dblib quoters causing OOB writes	CRITICAL	9.8

vulnfeed aggregates 7640 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.