CVE-2025-13601

HIGH

MEDIUM Priority: 0.03 BB Relevance: 50/100

Published: 2025-11-26 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Local

AC: Low

PR: None

UI: None

S: Unchanged

C: None

I: High

A: High

Description

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

Weakness Classification (1)

CWE-190 — Integer Overflow or Wraparound

Affected Software (103)

Vendor	Product	Version
—	—	0 < 2.86.3
gnome	glib	< 2.86.3
redhat	ceph_storage	8.0
redhat	codeready_linux_builder	9.0
redhat	codeready_linux_builder_for_arm64	10.0
redhat	codeready_linux_builder_for_arm64	8.0
redhat	codeready_linux_builder_for_arm64	9.6
redhat	codeready_linux_builder_for_arm64_eus	9.4
redhat	codeready_linux_builder_for_arm64_eus	10.0
redhat	codeready_linux_builder_for_ibm_z_systems	9.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems	10.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems	8.0_s390x
redhat	codeready_linux_builder_for_ibm_z_systems	9.4_s390x
redhat	codeready_linux_builder_for_ibm_z_systems	9.6_s390x
redhat	codeready_linux_builder_for_ibm_z_systems_eus	10.0_s390x
redhat	codeready_linux_builder_for_power_little_endian	9.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian	10.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian	8.0_ppc64le
redhat	codeready_linux_builder_for_power_little_endian	9.4_ppc64le
redhat	codeready_linux_builder_for_power_little_endian	9.6_ppc64le
redhat	codeready_linux_builder_for_power_little_endian_eus	10.0_ppc64le
redhat	codeready_linux_builder_for_x86_64	9.0
redhat	codeready_linux_builder_for_x86_64	10.0
redhat	codeready_linux_builder_for_x86_64	8.0
redhat	codeready_linux_builder_for_x86_64	9.4
redhat	codeready_linux_builder_for_x86_64	9.6
redhat	codeready_linux_builder_for_x86_64_eus	10.0
redhat	discovery	2.0
redhat	enterprise_linux_for_arm_64	9.0
redhat	enterprise_linux_for_arm_64	10.0

Showing 30 of 103 entries