← CVE Intelligence

CVE-2025-13601

Glib: integer overflow in in g_escape_uri_string() PUBLISHED

Description (CNA)

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 2.86.3
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.80.4-10.el10_1.12 before *
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.87.0-1.el10 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:2.80.4-4.el10_0.8 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:2.56.1-11.el7_9 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.56.4-168.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:2.56.4-8.el8_2.4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:2.56.4-10.el8_4.4 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:2.56.4-10.el8_4.4 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:2.56.4-158.el8_6.4 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:2.56.4-158.el8_6.4 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:2.56.4-158.el8_6.4 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:2.56.4-164.el8_8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:2.56.4-164.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-18.el9_7.1 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.78.6-3.el9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-18.el9_7.1 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:2.68.4-5.el9_0.4 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:2.68.4-7.el9_2.4 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:2.68.4-14.el9_4.5 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:2.68.4-16.el9_6.4 before *
Red Hat / Red Hat OpenShift Container Platform 4.12unaffected 412.86.202602021310-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.13unaffected 413.92.202602240113-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.14unaffected 414.92.202602171627-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.15unaffected 415.92.202603101737-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.16unaffected 416.94.202602101357-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.17unaffected 417.94.202602090846-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.18unaffected 418.94.202602022246-0 before *
Red Hat / Red Hat OpenShift Container Platform 4.19unaffected 4.19.9.6.202602112047-0 before *
Red Hat / Red Hat Ceph Storage 8unaffected 1769512383 before *
Red Hat / Red Hat Discovery 2unaffected 1769104765 before *
Red Hat / Red Hat Discovery 2unaffected 1769111774 before *
Red Hat / Red Hat Hardened Imagesunaffected 2.88.0-1.1.hum1 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1770740405 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1770808689 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1770807477 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1770646925 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1770808765 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-190

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.