GLib, a fundamental C library providing core application building blocks and utilities, contains two vulnerabilities: CVE-2025-14087, a buffer underflow in the GVariant parser causing heap corruption, and CVE-2025-14512, an integer overflow in GIO attribute escaping leading to a heap buffer overflow. These vulnerabilities have been rated as moderate severity by Red Hat Product Security. The issues affect Red Hat Enterprise Linux 8.8 variants including Extended Life Cycle Long Life, Update Services for SAP Solutions, and Telecommunications Update Service. Red Hat has issued security advisories and updates to fix these vulnerabilities.

Successful exploitation of these vulnerabilities could result in heap corruption or heap buffer overflow, potentially leading to application crashes or other undefined behavior. The advisory rates the impact as moderate. There are no known exploits in the wild at this time.

Red Hat has released updated glib2 packages for Red Hat Enterprise Linux 8.8 and related update services that address these vulnerabilities. Users should apply the security updates as detailed in Red Hat advisory RHSA-2026:19523 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation actions are specified or required beyond applying the official patches.