CVE-2025-6052CWE-190

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

Low · published June 13, 2025

CVSS v3.1
3.7
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00522 · 43.4th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-06-13T15:40Z
EPSS history
Timeline
  • 13 JUN 15:40Z
    Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
    cvelistv5