Heap Buffer Overflow in GLib's GIO Affects Multiple Products
CVE-2025-14512
6.5MEDIUM
Key Information:
- Vendor
Gnome
- Status
- Vendor
- CVE Published:
- 11 December 2025
What is CVE-2025-14512?
A vulnerability exists in GLib that enables a heap buffer overflow due to an integer overflow in the escape_byte_string() function within the GIO module. This flaw can be exploited when processing malicious files or attributes from a remote filesystem, potentially leading to a denial-of-service condition. Attackers may craft specific input that triggers this vulnerability, making it critical for users to implement timely security updates to mitigate risks.
Affected Version(s)
Cert Manager support for Red Hat OpenShift release 1.17 1791371080
Cert Manager support for Red Hat OpenShift release 1.17 1791371069
Cert Manager support for Red Hat OpenShift release 1.17 1791788287
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Codean Labs for reporting this issue.