vulnerability

Red Hat: CVE-2025-13601: glib: Integer overflow in in g_escape_uri_string() (Multiple Advisories)

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:N/I:C/A:C)
Published
Nov 24, 2025
Added
Jan 23, 2026
Modified
Jan 29, 2026

Description

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

Solutions

redhat-upgrade-glib2redhat-upgrade-glib2-debuginforedhat-upgrade-glib2-debugsourceredhat-upgrade-glib2-develredhat-upgrade-glib2-devel-debuginforedhat-upgrade-glib2-docredhat-upgrade-glib2-famredhat-upgrade-glib2-fam-debuginforedhat-upgrade-glib2-staticredhat-upgrade-glib2-testsredhat-upgrade-glib2-tests-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.