CVE-2025-14512
published 2025-12-11CVE-2025-14512: A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib…
medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | glib2.0 | < glib2.0 2.74.6-2+deb12u8 (bookworm) | glib2.0 2.74.6-2+deb12u8 (bookworm) |
| gnome | glib | < 2.86.3 | 2.86.3 |
| msrc | azl3_glib_2.78.6-5_on_azure_linux_3.0 | — | — |
| msrc | azl3_glib_2.78.6-6_on_azure_linux_3.0 | — | — |
| msrc | cbl2_glib_2.71.0-8_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_glib_2.71.0-9_on_cbl_mariner_2.0 | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openshift | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM