Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2025-6052

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

Description

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References