The vulnerability CVE-2025-14087 in GNOME's GLib library arises from a buffer underflow in the GVariant parser, which can lead to heap corruption. This flaw allows a remote attacker to cause denial of service or potentially execute arbitrary code by supplying crafted input strings. Red Hat advisories RHSA-2026:15953 and RHSA-2026:15969 confirm the issue affects glib2 packages in Red Hat Enterprise Linux 8 and 10 respectively and provide patched versions. The CVSS 3.1 vector indicates the attack requires network access with high complexity but no privileges or user interaction. The vendor has issued official fixes to remediate this vulnerability.

Successful exploitation of this vulnerability can cause heap corruption in affected GLib versions, leading to denial of service or potential code execution. The CVSS score of 5.6 reflects limited confidentiality and integrity impact but a notable availability impact. No known exploits are reported in the wild at this time.

Official patches addressing CVE-2025-14087 are available from Red Hat for affected versions of glib2 in Red Hat Enterprise Linux 8 and 10. Users should apply the security updates as described in Red Hat advisories RHSA-2026:15953 and RHSA-2026:15969. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigation is required beyond applying these official fixes.