« List of all CVEs

CVE-2025-14512

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

Published: 12/11/2025 Last updated: 7/13/2026 Reserved: 12/11/2025

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Metrics

Version Score Severity Vector String
3.1 6.5 Medium CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Opam packages affected (1)

conf-glib-2

Products affected (72)

Product Vendor Version
Red Hat Discovery 2 Red Hat QCM4290
Red Hat Discovery 2 Red Hat 5.2.0-7.0.0
Red Hat Discovery 2 Red Hat <= 2.0.0.92
Red Hat Discovery 2 Red Hat QCM6125
glib GNOME < 1.132.2
glib GNOME 2019.3 through 2019.3.14
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat MSM8953
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat QCA6175A
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Red Hat QCA6390
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat QCA6391
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat QCA6426
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat QCA6436
Red Hat Enterprise Linux 9 Red Hat QCA6564A
Red Hat Enterprise Linux 9 Red Hat QCA6564AU
Red Hat Enterprise Linux 9 Red Hat QCA6574
Red Hat Enterprise Linux 9 Red Hat QCA6574A
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Red Hat QCA6574AU
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat QCA6584AU
Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat QCA6595AU
Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat QCA6595
Red Hat Enterprise Linux 10 Red Hat < 91.4.0
Red Hat Enterprise Linux 10 Red Hat < 91.4.0
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat < 95
Red Hat Enterprise Linux 8 Red Hat APQ8053
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat CSRB31024
Red Hat Enterprise Linux 6 Red Hat SA6155P
Red Hat Enterprise Linux 7 Red Hat SA8145P
Red Hat Enterprise Linux 10 Red Hat < 10.0.17763.2183
Red Hat Enterprise Linux 10 Red Hat < 10.0.19042.1237
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat >= 20, < 20.0.13
Red Hat Enterprise Linux 8 Red Hat Android-10 Android-9
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat < 9
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat 10 Version 1809 for ARM64-based Systems
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat 10 for x64-based Systems
Red Hat Enterprise Linux 8.6 Telecommunications Update Service Red Hat version 1803 (Core Installation)
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat 2016 (Core installation)
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat 1.03
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat All versions
Red Hat Enterprise Linux 9 Red Hat Android-8.0 Android-8.1 Android-9
Red Hat Enterprise Linux 9 Red Hat < 7.77
Red Hat Enterprise Linux 9 Red Hat unspecified
Red Hat Enterprise Linux 9 Red Hat 10 Version 1709 for 32-bit Systems
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Red Hat 2019
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat < 1.133.0
Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat 11.0.0
Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat < publication
Red Hat Enterprise Linux 6 Red Hat 10 Version 1607 for 32-bit Systems
Red Hat Enterprise Linux 7 Red Hat 2019 (Core installation)
Red Hat Hardened Images Red Hat QCS4290
Red Hat Hardened Images Red Hat 5.0.7.2
Red Hat Insights proxy 1.5 Red Hat QCS6125
Red Hat Insights proxy 1.5 Red Hat < watchOS 6.2
Red Hat Enterprise Linux 8 Red Hat 2016
Red Hat Enterprise Linux 9 Red Hat 2008 for x64-based Systems Service Pack 2 (Core installation)
Red Hat Enterprise Linux 10 Red Hat SA6155
Red Hat Enterprise Linux 8 Red Hat SA8150P
Red Hat Enterprise Linux 9 Red Hat SA8155
Red Hat Enterprise Linux 10 Red Hat 10 Version 1809 for ARM64-based Systems
Red Hat OpenShift Container Platform 4 Red Hat SA8155P
Red Hat OpenShift Container Platform 4 Red Hat 2012 (Core installation)
Red Hat AI Inference Server 3.2 Red Hat QCA6696
Red Hat AI Inference Server 3.2 Red Hat n/a
Red Hat OpenShift Container Platform 4 Red Hat SA8195P
Red Hat OpenShift Container Platform 4 Red Hat unspecified
Red Hat Update Infrastructure 5 Red Hat 4.4.0.0.0
Red Hat Update Infrastructure 5 Red Hat SA415M
Red Hat Update Infrastructure 5 Red Hat SA515M
Red Hat Update Infrastructure 5 Red Hat 6.1.4.2, 6.0.4.2, 7.0.0.rc2
Red Hat Update Infrastructure 5 Red Hat <= 2.0.0
Red Hat Update Infrastructure 5 Red Hat SA6145P
Red Hat Update Infrastructure 5 Red Hat < 1.4.18
Red Hat Update Infrastructure 5 Red Hat SA6150P

References (42)

Credits (2)