CVE-2025-13601CWE-190

CVE-2025-13601

High Β· published November 26, 2025

CVSS v3.1
7.7
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

⚑ A miscalculation in buffer size is opening the door to a heap of trouble! The `g_escape_uri_string()` function in glib has a sneaky buffer overflow vulnerability just waiting to be exploited. πŸ”₯ Think of it like a crowded restaurant where the chef misjudges the number of plates needed β€” he keeps trying to stack one on top of another, and soon enough, they’re spilling over the edge! This buffer overflow occurs when the function tries to handle a string with too many unacceptable characters, leading to a messy situation. An attacker could potentially manipulate this vulnerability to write data beyond the allocated memory space, which may lead to unexpected behavior, crashes, or even arbitrary code execution in the worst-case scenario! This could be absolutely devastating for any application relying on glib for safe string escaping.

Put simply

Think of it like a crowded restaurant where the chef misjudges the number of plates needed β€” he keeps trying to stack one on top of another, and soon enough, they’re spilling over the edge! This buffer overflow occurs when the function tries to handle a string with too many unacceptable characters, leading to a messy situation. This heap-based buffer overflow is caused by an incorrect calculation of the buffer size in the `g_escape_uri_string()` function, allowing potentially harmful data to overflow and write off the end of the allocated string.

What to do

An attacker could potentially manipulate this vulnerability to write data beyond the allocated memory space, which may lead to unexpected behavior, crashes, or even arbitrary code execution in the worst-case scenario! This could be absolutely devastating for any application relying on glib for safe string escaping. Update glib to the latest version where this issue has been addressed. Review your code to ensure proper input validation is in place, especially for strings that may require escaping. Regularly audit your dependencies to catch such vulnerabilities early! You've got this! A timely update and some good coding practices can secure your applications. πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
7.7 Β· HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00322 Β· 24.0th percentile
Weakness
CWE-190 Β· Integer Overflow or Wraparound
Published
2025-11-26T20:15Z
Affected products (102)
ProductVersionsFixed in
redhat/codeready_linux_builderall versionsβ€”
redhat/codeready_linux_builder_for_ibm_z_systemsall versionsβ€”
redhat/codeready_linux_builder_for_power_little_endianall versionsβ€”
redhat/codeready_linux_builder_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_arm_64all versionsβ€”
redhat/enterprise_linux_for_ibm_z_systemsall versionsβ€”
redhat/enterprise_linux_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/codeready_linux_builder_for_arm64all versionsβ€”
redhat/codeready_linux_builder_for_ibm_z_systemsall versionsβ€”
redhat/codeready_linux_builder_for_power_little_endianall versionsβ€”
redhat/codeready_linux_builder_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_arm_64all versionsβ€”
redhat/enterprise_linux_for_ibm_z_systemsall versionsβ€”
redhat/enterprise_linux_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/codeready_linux_builder_for_arm64all versionsβ€”
redhat/codeready_linux_builder_for_ibm_z_systemsall versionsβ€”
redhat/codeready_linux_builder_for_power_little_endianall versionsβ€”
redhat/codeready_linux_builder_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_arm_64all versionsβ€”
redhat/enterprise_linux_for_ibm_z_systemsall versionsβ€”
redhat/enterprise_linux_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_arm_64all versionsβ€”
redhat/enterprise_linux_for_ibm_z_systemsall versionsβ€”
redhat/enterprise_linux_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/enterprise_linux_server_ausall versionsβ€”
redhat/codeready_linux_builder_for_arm64_eusall versionsβ€”
redhat/codeready_linux_builder_for_ibm_z_systemsall versionsβ€”
redhat/codeready_linux_builder_for_power_little_endianall versionsβ€”
redhat/codeready_linux_builder_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_arm_64all versionsβ€”
redhat/enterprise_linux_for_ibm_z_systemsall versionsβ€”
redhat/enterprise_linux_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_x86_64_eusall versionsβ€”
redhat/enterprise_linux_server_ausall versionsβ€”
redhat/enterprise_linux_server_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_server_for_power_little_endian_eusall versionsβ€”
redhat/codeready_linux_builder_for_arm64_eusall versionsβ€”
redhat/codeready_linux_builder_for_ibm_z_systems_eusall versionsβ€”
redhat/codeready_linux_builder_for_power_little_endian_eusall versionsβ€”
redhat/codeready_linux_builder_for_x86_64_eusall versionsβ€”
redhat/enterprise_linux_for_arm_64_eusall versionsβ€”
redhat/enterprise_linux_for_ibm_z_systems_eusall versionsβ€”
redhat/enterprise_linux_for_power_little_endian_eusall versionsβ€”
redhat/enterprise_linux_for_x86_64_eusall versionsβ€”
redhat/enterprise_linux_server_for_power_little_endianall versionsβ€”
redhat/codeready_linux_builder_for_arm64all versionsβ€”
redhat/codeready_linux_builder_for_ibm_z_systemsall versionsβ€”
redhat/codeready_linux_builder_for_power_little_endianall versionsβ€”
redhat/codeready_linux_builder_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_arm_64all versionsβ€”
redhat/enterprise_linux_for_ibm_z_systemsall versionsβ€”
redhat/enterprise_linux_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_for_power_little_endian_eusall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_x86_64_eusall versionsβ€”
redhat/enterprise_linux_server_ausall versionsβ€”
redhat/enterprise_linux_server_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_x86_64_eusall versionsβ€”
redhat/enterprise_linux_server_ausall versionsβ€”
redhat/enterprise_linux_server_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_server_tusall versionsβ€”
redhat/enterprise_linux_for_x86_64all versionsβ€”
redhat/enterprise_linux_for_x86_64_eusall versionsβ€”
redhat/enterprise_linux_server_for_power_little_endianall versionsβ€”
redhat/enterprise_linux_server_tusall versionsβ€”
redhat/enterprise_linux_for_x86_64_eusall versionsβ€”
redhat/enterprise_linux_server_ausall versionsβ€”
redhat/enterprise_linux_server_ausall versionsβ€”
redhat/ceph_storageall versionsβ€”
redhat/discoveryall versionsβ€”
gnome/glib< 2.86.32.86.3
redhat/openshift_container_platformall versionsβ€”
redhat/openshift_container_platformall versionsβ€”
redhat/openshift_container_platformall versionsβ€”
redhat/openshift_container_platformall versionsβ€”
redhat/openshift_container_platformall versionsβ€”
redhat/openshift_container_platform_for_arm64all versionsβ€”
redhat/openshift_container_platform_for_arm64all versionsβ€”
redhat/openshift_container_platform_for_arm64all versionsβ€”
redhat/openshift_container_platform_for_arm64all versionsβ€”
redhat/openshift_container_platform_for_arm64all versionsβ€”
redhat/openshift_container_platform_for_ibm_zall versionsβ€”
redhat/openshift_container_platform_for_ibm_zall versionsβ€”
redhat/openshift_container_platform_for_ibm_zall versionsβ€”
redhat/openshift_container_platform_for_ibm_zall versionsβ€”
redhat/openshift_container_platform_for_ibm_zall versionsβ€”
redhat/openshift_container_platform_for_linuxoneall versionsβ€”
redhat/openshift_container_platform_for_linuxoneall versionsβ€”
redhat/openshift_container_platform_for_linuxoneall versionsβ€”
redhat/openshift_container_platform_for_linuxoneall versionsβ€”
redhat/openshift_container_platform_for_linuxoneall versionsβ€”
redhat/openshift_container_platform_for_powerall versionsβ€”
redhat/openshift_container_platform_for_powerall versionsβ€”
redhat/openshift_container_platform_for_powerall versionsβ€”
redhat/openshift_container_platform_for_powerall versionsβ€”
redhat/openshift_container_platform_for_powerall versionsβ€”
References (33)
https://access.redhat.com/errata/RHSA-2026:0936 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:0975 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:0991 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1323 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1324 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1326 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1327 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1465 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1608 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1624 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1625 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1626 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1627 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1652 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:1736 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:18344 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:18705 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2064 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2072 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2485 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2563 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2633 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2659 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2671 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:2974 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:3415 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:4419 Β· [email protected]https://access.redhat.com/errata/RHSA-2026:7461 Β· [email protected]https://access.redhat.com/security/cve/CVE-2025-13601 Β· [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2416741 Β· [email protected]https://gitlab.gnome.org/GNOME/glib/-/issues/3827 Β· [email protected]https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914 Β· [email protected]https://cert-portal.siemens.com/productcert/html/ssa-253495.html Β· 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 26 NOV 14:44Z
    Glib: integer overflow in in g_escape_uri_string()
    cvelistv5