This vulnerability arises from a flaw in GLib's GString implementation used in Red Hat Enterprise Linux 10, where adding data to a very large string causes an integer overflow in size calculations. This overflow leads to the system believing there is sufficient memory when there is not, potentially causing out-of-bounds writes. The CVSS 3.1 score is 3.7 (low severity) with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts availability only. No known exploits have been reported, and the vendor advisory is available but does not specify patch status.

The impact is limited to potential application or system crashes and memory corruption due to out-of-bounds memory writes. There is no confidentiality or integrity impact reported. The low CVSS score reflects the limited severity and complexity of exploitation.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-6052 for current remediation guidance. No specific mitigation steps are provided in the advisory content. Users should monitor the vendor advisory for updates and apply official fixes once available.