CVE-2025-4373

Medium CVSS: 4.8

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Vendor

Product

CWE

CWE-124

Yayın Tarihi

2025-05-06 15:16:05

Güncelleme

2025-09-02 03:15:41

Source Identifier

secalert@redhat.com

KEV Date Added

Kategoriler

CWE-124 MEDIUM 2025

Referanslar

https://access.redhat.com/errata/RHSA-2025:10855 https://access.redhat.com/errata/RHSA-2025:11140 https://access.redhat.com/errata/RHSA-2025:11327 https://access.redhat.com/errata/RHSA-2025:11373 https://access.redhat.com/errata/RHSA-2025:11374 https://access.redhat.com/errata/RHSA-2025:11662 https://access.redhat.com/errata/RHSA-2025:12275 https://access.redhat.com/errata/RHSA-2025:13335 https://access.redhat.com/errata/RHSA-2025:14988 https://access.redhat.com/errata/RHSA-2025:14989 https://access.redhat.com/errata/RHSA-2025:14990 https://access.redhat.com/errata/RHSA-2025:14991 https://access.redhat.com/security/cve/CVE-2025-4373 https://bugzilla.redhat.com/show_bug.cgi?id=2364265 https://gitlab.gnome.org/GNOME/glib/-/issues/3677