https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:04:42 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:0936 <p><strong>Affected:</strong> AlmaLinux:9: glib2, AlmaLinux:9: glib2-devel, AlmaLinux:9: glib2-doc, AlmaLinux:9: glib2-static, AlmaLinux:9: glib2-tests</p> <p>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.</p> <p>Security Fix(es):</p> <p>* glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: glib2, AlmaLinux:9: glib2-devel, AlmaLinux:9: glib2-doc, AlmaLinux:9: glib2-static, AlmaLinux:9: glib2-tests</p> <p>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.</p> <p>Security Fix(es):</p> <p>* glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:0936 https://cve.radiocsirt.org/vuln/bdu:2026-02745 bdu:2026-02745 https://cve.radiocsirt.org/vuln/bdu:2026-02745 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/euvd-2026-361961 EUVD-2026-361961 https://cve.radiocsirt.org/vuln/euvd-2026-361961 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13601 <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.</p> <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13601 https://cve.radiocsirt.org/vuln/ghsa-v6c5-9mp4-mwq4 <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.</p> <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.</p> https://cve.radiocsirt.org/vuln/ghsa-v6c5-9mp4-mwq4 https://cve.radiocsirt.org/vuln/icsa-26-188-05 <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> https://cve.radiocsirt.org/vuln/icsa-26-188-05 https://cve.radiocsirt.org/vuln/msrc_cve-2025-13601 msrc_CVE-2025-13601 https://cve.radiocsirt.org/vuln/msrc_cve-2025-13601 https://cve.radiocsirt.org/vuln/oesa-2026-1137 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: glib2</p> <p>GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib&amp;amp;apos;s code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fix(es):</p> <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.(CVE-2025-13601)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: glib2</p> <p>GLib is a bundle of three (formerly five) low-level system libraries written in C and developed mainly by GNOME. GLib&amp;amp;apos;s code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fix(es):</p> <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.(CVE-2025-13601)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1137 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15810-1 <p>gio-branding-upstream-2.86.3-1.1 on GA media</p> <p>gio-branding-upstream-2.86.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15810-1 https://cve.radiocsirt.org/vuln/rhsa-2026:1323 <p>glib: Integer overflow in in g_escape_uri_string()</p> <p>glib: Integer overflow in in g_escape_uri_string()</p> https://cve.radiocsirt.org/vuln/rhsa-2026:1323 https://cve.radiocsirt.org/vuln/rlsa-2026:18344 <p><strong>Affected:</strong> Rocky Linux:10: mingw-glib2</p> <p>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.</p> <p>Security Fix(es):</p> <p>* glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: mingw-glib2</p> <p>GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.</p> <p>Security Fix(es):</p> <p>* glib: Integer overflow in in g_escape_uri_string() (CVE-2025-13601)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the Rocky Linux 10 Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:18344 https://cve.radiocsirt.org/vuln/ssa-253495 <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> https://cve.radiocsirt.org/vuln/ssa-253495 https://cve.radiocsirt.org/vuln/suse-su-2025:4441-1 <p>Security update for glib2</p> <p>Security update for glib2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:4441-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13601 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: glib2.0, Ubuntu:Pro:16.04:LTS: glib2.0, Ubuntu:Pro:18.04:LTS: glib2.0, Ubuntu:Pro:20.04:LTS: glib2.0, Ubuntu:22.04:LTS: glib2.0, Ubuntu:24.04:LTS: glib2.0, Ubuntu:25.10: glib2.0</p> <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: glib2.0, Ubuntu:Pro:16.04:LTS: glib2.0, Ubuntu:Pro:18.04:LTS: glib2.0, Ubuntu:Pro:20.04:LTS: glib2.0, Ubuntu:22.04:LTS: glib2.0, Ubuntu:24.04:LTS: glib2.0, Ubuntu:25.10: glib2.0</p> <p>A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13601 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0187 <p>Ein lokaler Angreifer kann eine Schwachstelle in der glib Bibliothek von Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen und weitere nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in der glib Bibliothek von Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen und weitere nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0187