The GLib library, which provides fundamental building blocks for C applications and GNOME, contains two vulnerabilities: a buffer overflow in set_connect_msg() (CVE-2024-52533) and a buffer underflow in g_string_insert_unichar (CVE-2025-4373). These issues could potentially lead to memory corruption. Red Hat has issued a security advisory (RHSA-2025:11373) and released updated glib2 packages for Red Hat Enterprise Linux 9.2 and related variants to remediate these vulnerabilities. The advisory rates the impact as moderate and provides detailed package updates and instructions for applying the fix.

The vulnerabilities involve memory corruption issues (buffer overflow and underflow) in GLib, which could affect applications relying on this library. The advisory rates the security impact as moderate. There are no reports of exploitation in the wild. The issues could potentially be leveraged to cause application crashes or other unintended behavior, but specific exploitation details are not provided.

Red Hat has released updated glib2 packages for affected Red Hat Enterprise Linux 9.2 variants to fix these vulnerabilities. Users should apply the official security update as described in Red Hat advisory RHSA-2025:11373 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor beyond applying the update.