CVE-2025-7039

Vulnerability

Description

CVE-2025-7039 is an integer overflow vulnerability in glib's temporary file creation functions, specifically within get_tmp_file() in gfileutils.c. The flaw occurs when the length of file path strings is not properly validated, leading to an integer overflow that results in an out-of-bounds memory access.[1][2]

Exploitation

A local attacker can exploit this vulnerability by creating symbolic links that point to arbitrary file paths. When an affected application uses glib to create temporary files or directories, the integer overflow can cause the program to read or write beyond the allocated buffer. This allows the attacker to manipulate file paths and potentially access private or restricted data.[1][2]

Impact

Successful exploitation could allow a local attacker to perform path traversal, accessing files or temporary file content that should be private. The out-of-bounds access may lead to information disclosure or unauthorized data manipulation.[2]

Mitigation

Red Hat has acknowledged the issue (as noted in references [1] and [2]). Users should upgrade glib to the latest patched version once available. No workaround is currently documented; restricting local access may reduce risk.