← CVE Intelligence

CVE-2025-4373

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar PUBLISHED

Description (CNA)

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0 before 2.84.2
Red Hat / Red Hat Enterprise Linux 10unaffected 0:2.80.4-4.el10_0.6 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:2.56.4-166.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 0:2.56.4-8.el8_2.2 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 0:2.56.4-10.el8_4.2 before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 0:2.56.4-10.el8_4.2 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 0:2.56.4-158.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 0:2.56.4-158.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 0:2.56.4-158.el8_6.2 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 0:2.56.4-162.el8_8 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 0:2.56.4-162.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-16.el9_6.2 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:2.68.4-16.el9_6.2 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:2.68.4-5.el9_0.2 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:2.68.4-7.el9_2.2 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:2.68.4-14.el9_4.3 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1.5.5-1754504343 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265330 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265394 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265332 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265435 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265342 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265332 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753269432 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265411 before *
Red Hat / Red Hat OpenShift distributed tracing 3.6.0unaffected rhosdt-3.6-1753265314 before *
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 10affected
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 8affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat Enterprise Linux 9affected
Red Hat / Red Hat Enterprise Linux 9affected

CWE

CWE-124

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.