The vulnerability CVE-2025-60018 involves glib-networking's OpenSSL backend failing to properly verify the return value of BIO_write(), which results in an out-of-bounds read condition. This can potentially lead to information disclosure or application instability. The issue affects version 2.60 of glib-networking. The CVSS 3.1 base score is 4.8, reflecting a network attack vector with high attack complexity, no privileges required, no user interaction, unchanged scope, low confidentiality impact, no integrity impact, and low availability impact. The Red Hat advisory is referenced but does not provide explicit patch or mitigation details in the provided excerpt.

The impact of this vulnerability is limited to a potential out-of-bounds read, which may cause partial information disclosure or application crashes. The CVSS score of 4.8 indicates a medium severity with low confidentiality and availability impacts. There are no known exploits in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-60018 for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No vendor-stated mitigations or workarounds are provided in the available information.