NetSight
IP …
high7.7

CVE-2025-13601

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.

Impact

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

Affected products

VendorProductAffected versions
RedhatCodeready Linux Builder
Version 9.0
RedhatCodeready Linux Builder For Ibm Z Systems
Versions 9.0_s390x, 10.0_s390x, 8.0_s390x, 9.4_s390x, 9.6_s390x
RedhatCodeready Linux Builder For Power Little Endian
Versions 9.0_ppc64le, 10.0_ppc64le, 8.0_ppc64le, 9.4_ppc64le, 9.6_ppc64le
RedhatCodeready Linux Builder For X86 64
Versions 9.0, 10.0, 8.0, 9.4, 9.6
RedhatEnterprise Linux For Arm 64
Versions 9.0, 10.0, 8.0, 9.2, 9.4, 9.6
RedhatEnterprise Linux For Ibm Z Systems
Versions 9.0_s390x, 10.0_s390x, 8.0_s390x, 9.2_s390x, 9.4_s390x, 9.6_s390x
RedhatEnterprise Linux For Power Little Endian
Versions 9.0_ppc64le, 10.0_ppc64le, 8.0_ppc64le, 9.2_ppc64le, 9.4_ppc64le, 9.6_ppc64le
RedhatEnterprise Linux For X86 64
Versions 9.0, 10.0, 8.0, 9.2, 9.4, 9.6
RedhatCodeready Linux Builder For Arm64
Versions 10.0, 8.0, 9.6
RedhatEnterprise Linux Server Aus
Versions 9.2, 9.4, 9.6, 8.6, 8.4, 8.2
RedhatCodeready Linux Builder For Arm64 Eus
Versions 9.4, 10.0
RedhatEnterprise Linux For X86 64 Eus
Versions 9.4, 10.0, 9.6, 8.6, 8.8, 8.4

Weakness classification

CWE-190

References