CVE-2025-13601

Katalog CVE

CVSS 7.7 · High EPSS 0,32%

Kerentanan Integer Overflow or Wraparound pada redhat codeready linux builder, redhat codeready linux builder for ibm z systems +18 lainnya. Skor CVSS 3.1 7.7 (High) menurut redhat.com.

Deskripsi (NVD)

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

Rincian

Terbit di NVD

26 November 2025

Terakhir diubah

31 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.7 (High), sumber redhat.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 102 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://access.redhat.com/errata/RHSA-2026:0936 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:0975 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:0991 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1323 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1324 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1326 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1327 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1465 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1608 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1624 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1625 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1626 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1627 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1652 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:1736 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:2064 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:2072 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:2485 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:2563 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:2633 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:2659 advisory vendor
• https://access.redhat.com/errata/RHSA-2026:2671 advisory vendor
• https://access.redhat.com/security/cve/CVE-2025-13601 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2416741 issue tracking · advisory vendor
• https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914 advisory pihak ketiga