Fedora Account System
Red Hat Associate
Red Hat Customer
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. A heap-buffer-overflow READ of 1 byte occurs in g_key_file_get_locale_string_list() at gkeyfile.c:2464 when the resolved locale string value is an empty string (""). The function computes len = strlen(value) which yields 0, then accesses value[len - 1]. Since len is gsize(unsigned), len - 1 wraps to SIZE_MAX, causing a read of 1 byte before the heap allocation (under-read). Any application that loads a key file from untrusted input and calls g_key_file_get_locale_string_list() on a key whose value is empty is affected. The key file format is commonly used for .desktop files and application configuration.
This was fixed upstream with the following releases: - 2.88.1 - 2.89.0 Fedora 44 and 45 ship 2.88.3 and 2.89.3 respectively, thus not affected. While Fedora 43 is affected (2.86.5), the CVE is considered low impact in practice. Furthermore, Fedora 43 will EOL on December 9. No fix is planned.