« List of all CVEs

CVE-2025-14087

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Published: 12/10/2025 Last updated: 7/13/2026 Reserved: 12/5/2025

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 5.6 Medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Opam packages affected (1)

conf-glib-2

Products affected (85)

Product Vendor Version
Red Hat Enterprise Linux 10 Red Hat n/a
Red Hat Enterprise Linux 10 Red Hat < 2021-05-03
Red Hat Enterprise Linux 9 Red Hat 10.0.0
Red Hat Enterprise Linux 9 Red Hat 2008 for 32-bit Systems Service Pack 2
Red Hat Discovery 2 Red Hat 9.2.1
Red Hat Discovery 2 Red Hat n/a
Red Hat Discovery 2 Red Hat 5.2.2.1
Red Hat Discovery 2 Red Hat ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1
glib GNOME n/a
glib GNOME 12.1.0.5
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat < Safari 12.1.2
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat < iTunes for Windows 12.9.6
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat < iCloud for Windows 7.13
Red Hat Enterprise Linux 9 Red Hat < iCloud for Windows 10.6
Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat n/a
Red Hat Enterprise Linux 9 Red Hat < 6.1.18
Red Hat Enterprise Linux 9 Red Hat GPAC Project Advanced Content commit a8a8d412dabcb129e695c3e7d861fcc81f608304,GPAC Project Advanced Content v1.0.1
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Red Hat n/a
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Moxa AWK-3131A Firmware version 1.13
Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat n/a
Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat n/a
Red Hat Enterprise Linux 6 Red Hat 10 for 32-bit Systems
Red Hat Enterprise Linux 9 Red Hat Build 16.6.3.84 (package 16.6.3.134)
Red Hat Enterprise Linux 10 Red Hat 13.2.0.0
Red Hat Enterprise Linux 10 Red Hat 13.3.0.0
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat < 84.0.4147.89
Red Hat Enterprise Linux 7 Extended Lifecycle Support Red Hat n/a
Red Hat Enterprise Linux 8 Red Hat unspecified
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat 2013 Service Pack 1
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat < iOS 12.4
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat < macOS Mojave 10.14.6
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Red Hat < tvOS 12.4
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Red Hat < *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat < KRNL64NUC - 7.49
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat < 7.84
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat unspecified
Red Hat Enterprise Linux 9 Red Hat 10 Version 1709 for x64-based Systems
Red Hat Enterprise Linux 9 Red Hat unspecified
Red Hat Enterprise Linux 9 Red Hat 2.1.0
Red Hat Enterprise Linux 9 Red Hat Brocade Fabric OS versions before v9.0.0 and after version v8.1.0
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Red Hat <= 8.6
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat n/a
Red Hat Enterprise Linux 6 Red Hat 11.0.0
Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat n/a
Red Hat Enterprise Linux 10 Red Hat < 10.0.17763.2183
Red Hat Enterprise Linux 10 Red Hat n/a
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat up to 15.4.062
Red Hat Enterprise Linux 7 Extended Lifecycle Support Red Hat 10 Version 1803 for 32-bit Systems
Red Hat Enterprise Linux 8 Red Hat 10 Version 1809 for 32-bit Systems
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat 10 Version 1709 for x64-based Systems
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat 10 Version 1607 for 32-bit Systems
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat unspecified
Red Hat Hardened Images Red Hat n/a
Red Hat Hardened Images Red Hat 4.2.11.1
Red Hat Enterprise Linux 10 Red Hat n/a
Red Hat Enterprise Linux 10 Red Hat Fixed in v3.17.0
Red Hat Insights proxy 1.5 Red Hat n/a
Red Hat Insights proxy 1.5 Red Hat < tvOS 13.4
Red Hat Enterprise Linux 9 Red Hat 2008 R2 for x64-based Systems Service Pack 1
Red Hat Enterprise Linux 8 Red Hat 10.1.1
Red Hat Enterprise Linux 8 Red Hat 8.1 for 32-bit systems
Red Hat Enterprise Linux 9 Red Hat 4.0.0
Red Hat Enterprise Linux 10 Red Hat n/a
Red Hat Enterprise Linux 10 Red Hat < 0.5.0
Red Hat Enterprise Linux 10 Red Hat AR8035, QCA6174A, QCA6391, QCA8081, QCA8337, QCA9377, QCM6490, QCS6490, SD 8 Gen1 5G, SD480, SD780G, SD888 5G, SDX12, SDX65, SM7450, SM8475, SM8475P, WCD9335, WCD9341, WCD9370, WCD9375, WCD9380, WCD9385, WCN3988, WCN3991, WCN6740, WCN6750, WCN6850, WCN6851, WCN6855, WCN6856, WCN7850, WCN7851, WSA8830, WSA8832, WSA8835
Red Hat Enterprise Linux 9 Red Hat 3.1.1
Red Hat Enterprise Linux 8 Red Hat 10.1.0
Red Hat Enterprise Linux 9 Red Hat 2012 R2
Red Hat Enterprise Linux 8 Red Hat RT 8.1
Red Hat Enterprise Linux 10 Red Hat n/a
Red Hat OpenShift Container Platform 4 Red Hat 3.1.0
Red Hat OpenShift Container Platform 4 Red Hat unspecified
Red Hat Enterprise Linux 10 Red Hat 12.0.0
Red Hat Enterprise Linux 10 Red Hat 10 Version 1809 for 32-bit Systems
Red Hat AI Inference Server 3.2 Red Hat < 95.0.4638.54
Red Hat AI Inference Server 3.2 Red Hat n/a
Red Hat Update Infrastructure 5 Red Hat 4.2.0.2.0
Red Hat Update Infrastructure 5 Red Hat < 15
Red Hat Update Infrastructure 5 Red Hat < 8
Red Hat Update Infrastructure 5 Red Hat 4.4.0.2.0
Red Hat Update Infrastructure 5 Red Hat 6.5.0 SP1 and earlier
Red Hat Update Infrastructure 5 Red Hat sqlite 3.31.1
Red Hat Update Infrastructure 5 Red Hat n/a
Red Hat Enterprise Linux 10 Red Hat 10 Version 1809 for x64-based Systems
Red Hat Enterprise Linux 10 Red Hat 11.0.1

References (44)

Credits (2)