PT-2025-19955 · Glib+10 · Glib+10

Published 2025-05-06 · Updated 2026-03-27 · CVE-2025-4373

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions GLib (affected versions not specified)

Description A flaw was found in GLib, which is vulnerable to an integer overflow in the g string insert unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-124

Related Identifiers

ALSA-2025:11140

ALSA-2025:11327

AZL-62286

AZL-62295

BDU:2025-07137

CESA-2025_11327

CVE-2025-4373

DLA-4412-1

ECHO-C49E-C84A-3D59

INFSA-2025_11140

INFSA-2025_11327

MGASA-2025-0173

OESA-2026-1763

OESA-2026-1764

OESA-2026-1765

OESA-2026-1766

RHSA-2025:10855

RHSA-2025:11140

RHSA-2025:11327

RHSA-2025:11373

RHSA-2025:11374

RHSA-2025:12275

RHSA-2025_11140

RHSA-2025_11327

SUSE-SU-2025:01880-1

SUSE-SU-2025:02167-1

SUSE-SU-2025:02233-1

SUSE-SU-2025:02375-1

SUSE-SU-2025:20471-1

SUSE-SU-2025:20508-1

SUSE-SU-2025_02167-1

SUSE-SU-2025_02233-1

USN-7532-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Glib

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 97

• https://access.redhat.com/errata/RHSA-2025:12275 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:11374 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02375-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:14991 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1763 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:11327 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20508-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20471-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:11140 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-62286 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-4373 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1766 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-11140.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:14989 · Vendor Advisory