A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
History

Tue, 06 May 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 06 May 2025 15:00:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE. A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
Title glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
References

Tue, 06 May 2025 14:30:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE.
Title glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar
Weaknesses CWE-124
References
Metrics threat_severity

None

cvssV3_1

{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L'}

threat_severity

Moderate


cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2025-05-06T14:48:39.264Z

Updated: 2025-05-06T15:09:46.724Z

Reserved: 2025-05-06T00:35:29.069Z

Link: CVE-2025-4373

cve-icon Vulnrichment

Updated: 2025-05-06T15:09:37.975Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-06T15:16:05.320

Modified: 2025-05-07T14:13:20.483

Link: CVE-2025-4373

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-06T00:00:00Z

Links: CVE-2025-4373 - Bugzilla