The vulnerability in glib-networking's OpenSSL backend arises from improper handling of memory allocation return values. Specifically, when an out of memory condition occurs, the failure to check the return value can cause the program to dereference a NULL pointer, potentially leading to a write to an invalid memory location. This can cause a denial of service or application crash but does not impact confidentiality or integrity. The vulnerability is assigned CVE-2025-60019 with a CVSS 3.1 base score of 3.7 (low severity). It affects version 2.60 of glib-networking. The Red Hat advisory linked does not explicitly state patch availability or remediation status.

The impact is limited to availability, potentially causing application crashes or denial of service due to NULL pointer dereference when memory allocation fails. There is no impact on confidentiality or integrity. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2025-60019 for current remediation guidance. Until a patch is available, users should monitor vendor communications for updates. No specific workaround or mitigation is provided in the advisory.