CVE-2025-7039 — Path Traversal in Azl3 Glib 2.78.6-3 ON Azure Linux 3.0
Severity
3.7LOWNVD
OSV7.7
EPSS
0.0%
top 86.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 3
Latest updateFeb 10
Description
A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 2.2 | Impact: 1.4
Affected Packages9 packages
🔴Vulnerability Details
3📋Vendor Advisories
6Debian▶
CVE-2025-7039: glib2.0 - A flaw was found in glib. An integer overflow during temporary file creation lea...↗2025