CVE-2025-13601
HIGHCVSS v3.1: 7.7 · EPSS: 0.0001 (2.3 percentile)
Source data as of:
At a glance
- Severity
- HIGH
- CVSS
- 7.7 v3.1 · NVD
- EPSS
- 0.0001 (2.3 percentile) · FIRST.org
- CISA KEV
- No
- Type
- Integer Overflow · NVD CWE
- Attack conditions (CVSS vector)
- No privilegesNo user interaction · Source: NVD Vector
- Affected vendors
- redhat, gnome
- Published
- 2025-11-26 · Modified: 2026-06-02
- References
- Jump to references (8)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.
- Distro https://access.redhat.com/errata/RHSA-2026:0936
- Distro https://access.redhat.com/errata/RHSA-2026:0975
- Distro https://access.redhat.com/errata/RHSA-2026:0991
- Distro https://access.redhat.com/errata/RHSA-2026:1323
- Distro https://access.redhat.com/errata/RHSA-2026:1324
- Distro https://access.redhat.com/errata/RHSA-2026:1326
- Distro https://access.redhat.com/errata/RHSA-2026:1327
- Distro https://access.redhat.com/errata/RHSA-2026:1465