Vulnerabilities in Glibc: CVE-2023-4911 and CVE-2025-3360 Disclosed

Vulnerabilities in Glibc: CVE-2023-4911 and CVE-2025-3360 Disclosed

First seen 18 Feb 2026, 12:23 UTC Api.Msrc.Microsoft 56.6

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in Glibc have been disclosed, affecting systems using versions prior to 2.82.5. CVE-2023-4911 involves a buffer overflow in ld.so leading to privilege escalation, while CVE-2025-3360 is related to an integer overflow and buffer under-read when parsing invalid ISO 8601 timestamps.

Timeline

2023-10-03
CVE-2023-4911 published
2023-10-04
First public PoC for CVE-2023-4911
2023-11-21
CVE-2023-4911 added to CISA KEV (active exploitation)
2025-04-07
CVE-2025-3360 published
2025-04-07
Information published about CVE-2025-3360