CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:15953
https://access.redhat.com/errata/RHSA-2026:15969
https://access.redhat.com/errata/RHSA-2026:15971
https://access.redhat.com/errata/RHSA-2026:19148
https://access.redhat.com/errata/RHSA-2026:19361
https://access.redhat.com/errata/RHSA-2026:19452
https://access.redhat.com/errata/RHSA-2026:19457
https://access.redhat.com/errata/RHSA-2026:19459
https://access.redhat.com/errata/RHSA-2026:19460
https://access.redhat.com/errata/RHSA-2026:19523
https://access.redhat.com/errata/RHSA-2026:19524
https://access.redhat.com/errata/RHSA-2026:19565
https://access.redhat.com/errata/RHSA-2026:19567
https://access.redhat.com/errata/RHSA-2026:21275
https://access.redhat.com/errata/RHSA-2026:22634
https://access.redhat.com/errata/RHSA-2026:25096
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:72502
https://access.redhat.com/errata/RHSA-2026:7461
https://access.redhat.com/errata/RHSA-2026:74674
https://access.redhat.com/errata/RHSA-2026:82304
https://access.redhat.com/errata/RHSA-2026:82322
https://access.redhat.com/errata/RHSA-2026:82347
https://access.redhat.com/errata/RHSA-2026:82354
https://access.redhat.com/errata/RHSA-2026:82372
https://access.redhat.com/errata/RHSA-2026:82857
https://access.redhat.com/errata/RHSA-2026:82888
https://access.redhat.com/security/cve/CVE-2025-14512 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2421339 Issue Tracking Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3845
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

History

14 Oct 2026, 20:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82857 -
  • () https://access.redhat.com/errata/RHSA-2026:82888 -

14 Oct 2026, 04:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82304 -
  • () https://access.redhat.com/errata/RHSA-2026:82322 -
  • () https://access.redhat.com/errata/RHSA-2026:82347 -
  • () https://access.redhat.com/errata/RHSA-2026:82354 -
  • () https://access.redhat.com/errata/RHSA-2026:82372 -

02 Oct 2026, 03:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:74674 -

30 Sep 2026, 20:10

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en glib. Esta vulnerabilidad permite un desbordamiento de búfer de montón y denegación de servicio (DoS) a través de un desbordamiento de entero en la función escape_byte_string() de GIO (Entrada/Salida de GLib) de GLib al procesar valores de atributos de archivos maliciosos o de sistemas de archivos remotos.

29 Sep 2026, 01:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72502 -

Information

Published : 2025-12-11 07:16

Updated : 2026-10-14 20:17


NVD link : CVE-2025-14512

Mitre link : CVE-2025-14512

CVE.ORG link : CVE-2025-14512


JSON object : View

Products Affected

redhat

  • openshift
  • enterprise_linux

gnome

  • glib
CWE
CWE-190

Integer Overflow or Wraparound