CVE-2025-14512

Published: Dec 11, 2025

Modified: Jun 2, 2026

PUBLISHED

CVSS v3.1

6.5

MEDIUM

Description

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

Vendor	Product	Versions
GNOME	glib	affected `0 - < 2.86.3`
Red Hat	Red Hat Enterprise Linux 10	unaffected `0:2.80.4-10.el10_1.13 - < *`
Red Hat	Red Hat Enterprise Linux 10	unaffected `0:2.80.4-12.el10_2.13 - < *`
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	unaffected `0:2.80.4-4.el10_0.9 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:2.56.4-169.el8_10 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected `0:2.56.4-10.el8_4.5 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	unaffected `0:2.56.4-10.el8_4.5 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	unaffected `0:2.56.4-158.el8_6.5 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	unaffected `0:2.56.4-158.el8_6.5 - < *`
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	unaffected `0:2.56.4-158.el8_6.5 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	unaffected `0:2.56.4-165.el8_8 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	unaffected `0:2.56.4-165.el8_8 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.68.4-18.el9_7.2 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.68.4-19.el9_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.68.4-18.el9_7.2 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:2.68.4-19.el9_8.1 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	unaffected `0:2.68.4-5.el9_0.5 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	unaffected `0:2.68.4-7.el9_2.5 - < *`
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	unaffected `0:2.68.4-14.el9_4.6 - < *`
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	unaffected `0:2.68.4-16.el9_6.5 - < *`
Red Hat	Red Hat Hardened Images	unaffected `2.88.0-1.1.hum1 - < *`
Red Hat	Red Hat Insights proxy 1.5	unaffected `1780420428 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798159 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798164 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798165 - < *`
Red Hat	Red Hat Update Infrastructure 5	unaffected `1779798222 - < *`
Red Hat	Red Hat Enterprise Linux 10	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions
Red Hat	Red Hat OpenShift Container Platform 4	All versions