VYPR
Get started
← All advisories
Medium severity6.5NVD Advisory· Published Dec 11, 2025· Updated May 11, 2026

CVE-2025-14512

CVE-2025-14512

Description

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

Affected products

6
  • GNOME Foundation/Glib
    cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*
    Range: <2.86.3
  • Red Hat/Openshift
    cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux4 versions
    cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Patches

1
7a54787e16ce
https://github.com/gnome/glibvia osv

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

7

News mentions

0

No linked articles in our index yet.