CVEvulnerability
CVE-2025-14512
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-12-11
- Last modified
- 2026-10-14
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-190
Description
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
Affected configurations
• gnome glib (< 2.86.3)
• redhat openshift 4.0
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• redhat enterprise linux 9.0
• redhat enterprise linux 10.0
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://access.redhat.com/errata/RHSA-2026:15953 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:15969 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:15971 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19148 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19361 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19452 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19457 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19459 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19460 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19523 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19524 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19565 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:19567 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:21275 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:22634 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:25096 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:29197 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:58981 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:72502 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:7461 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:74674 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:82304 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:82322 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:82347 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:82354 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:82372 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:82857 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:82888 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2025-14512 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2421339 Issue Tracking, Third Party Advisory
- https://gitlab.gnome.org/GNOME/glib/-/issues/3845 gitlab.gnome.org