This vulnerability in GNOME glib's GIO escape_byte_string() function arises from an integer overflow or wraparound, enabling a heap buffer overflow and potential denial-of-service. The flaw is triggered by specially crafted file or remote filesystem attribute values. The CVSS 3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability. Red Hat has issued updated glib2 packages (version 2.88.0-1.1.hum1) for affected architectures (aarch64, x86_64) as part of their Hardened Images RPMs update to remediate this vulnerability.

The vulnerability allows an attacker to cause a denial-of-service via heap buffer overflow due to integer overflow in the escape_byte_string() function of GLib's GIO component. There is no impact on confidentiality or integrity. No known exploits in the wild have been reported. The issue affects systems using vulnerable versions of glib, particularly in Red Hat Hardened Images RPMs prior to the update.

Red Hat has released updated glib2 packages (version 2.88.0-1.1.hum1) that address this vulnerability. Users should apply these updates to their Red Hat Hardened Images RPMs to remediate the issue. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-14512. No other mitigation steps are indicated or required beyond applying the official patch.