Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-14512

Опубликовано: 11 дек. 2025
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
Версия до 2.86.3 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 41%
0.00524
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 6.5
ubuntu
8 месяцев назад

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

CVSS3: 6.5
redhat
8 месяцев назад

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

CVSS3: 6.5
msrc
8 месяцев назад

Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

CVSS3: 6.5
debian
8 месяцев назад

A flaw was found in glib. This vulnerability allows a heap buffer over ...

CVSS3: 6.5
github
8 месяцев назад

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

EPSS

Процентиль: 41%
0.00524
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-190