CVE-2025-13601
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.32%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
- CVSS 3.1
- 7.7 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- EPSS
- 0.32% probability · 25th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190
- Affected
- redhat/codeready linux builder · redhat/codeready linux builder for ibm z systems · redhat/codeready linux builder for power little endian · redhat/codeready linux builder for x86 64 · redhat/enterprise linux for arm 64 · redhat/enterprise linux for ibm z systems · redhat/enterprise linux for power little endian · redhat/enterprise linux for x86 64 · redhat/codeready linux builder for arm64 · redhat/enterprise linux server aus · redhat/codeready linux builder for arm64 eus · redhat/enterprise linux for x86 64 eus · redhat/enterprise linux server for power little endian · redhat/enterprise linux server for power little endian eus · redhat/codeready linux builder for ibm z systems eus · redhat/codeready linux builder for power little endian eus · redhat/codeready linux builder for x86 64 eus · redhat/enterprise linux for arm 64 eus · redhat/enterprise linux for ibm z systems eus · redhat/enterprise linux for power little endian eus · +9 more
- Source
- secalert@redhat.com
References
- https://access.redhat.com/errata/RHSA-2026:0936Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:0975Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:0991Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1323Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1324Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1326Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1327Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1465Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1608Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1624Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1625Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1626Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1627Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1652Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:1736Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:18344
- https://access.redhat.com/errata/RHSA-2026:18705
- https://access.redhat.com/errata/RHSA-2026:2064Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2072Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2485Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2563Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2633Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2659Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2671Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:2974
- https://access.redhat.com/errata/RHSA-2026:3415
- https://access.redhat.com/errata/RHSA-2026:4419
- https://access.redhat.com/errata/RHSA-2026:7461
- https://access.redhat.com/security/cve/CVE-2025-13601Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2416741Issue Tracking, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.