CVE-2025-60018CWE-125

CVE-2025-60018

Medium · published September 25, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-09-25T20:15Z
References (3)
https://access.redhat.com/security/cve/CVE-2025-60018 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2398135 · [email protected]https://gitlab.gnome.org/GNOME/glib-networking/-/issues/226 · [email protected]
EPSS history
Timeline
  • 25 SEP 15:52Z
    Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"
    cvelistv5