CVE-2025-14512: Integer Overflow or Wraparound in GNOME glib
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
AI Analysis
Technical Summary
An integer overflow vulnerability exists in the GLib GIO escape_byte_string() function, causing a heap buffer overflow and potential denial-of-service. This occurs when maliciously crafted file or remote filesystem attribute values are processed. The vulnerability affects glib versions shipped with Red Hat Enterprise Linux 8 and 10. Red Hat has issued security advisories RHSA-2026:15953 and RHSA-2026:15969 providing updated glib2 packages that fix this issue.
Potential Impact
Successful exploitation of this vulnerability can cause a denial-of-service condition due to heap buffer overflow. There is no indication of confidentiality or integrity impact. The CVSS v3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability.
Mitigation Recommendations
Red Hat has released official security updates for glib2 packages in Red Hat Enterprise Linux 8 and 10 that address this vulnerability. Users should apply the updates as described in Red Hat advisories RHSA-2026:15953 and RHSA-2026:15969. No additional mitigation steps are required once the updates are applied.
CVE-2025-14512: Integer Overflow or Wraparound in GNOME glib
Description
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
CVSS v3.1
Score 6.5medium
Affected software
pkg:rpm/redhat/glibRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An integer overflow vulnerability exists in the GLib GIO escape_byte_string() function, causing a heap buffer overflow and potential denial-of-service. This occurs when maliciously crafted file or remote filesystem attribute values are processed. The vulnerability affects glib versions shipped with Red Hat Enterprise Linux 8 and 10. Red Hat has issued security advisories RHSA-2026:15953 and RHSA-2026:15969 providing updated glib2 packages that fix this issue.
Potential Impact
Successful exploitation of this vulnerability can cause a denial-of-service condition due to heap buffer overflow. There is no indication of confidentiality or integrity impact. The CVSS v3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and impact limited to availability.
Mitigation Recommendations
Red Hat has released official security updates for glib2 packages in Red Hat Enterprise Linux 8 and 10 that address this vulnerability. Users should apply the updates as described in Red Hat advisories RHSA-2026:15953 and RHSA-2026:15969. No additional mitigation steps are required once the updates are applied.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2025-12-11T06:28:34.708Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2026:15971","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7461","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2025-14512","vendor":"Red Hat"}]
Threat ID: 693a726596da2fc9d6ded0b6
Added to database: 12/11/2025, 07:27:33 UTC
Last enriched: 07/14/2026, 08:02:39 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 492
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.