by Kastro CVE-2025-14087
GNOME glib — Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Description · from the CVE record
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
Affected
ProductAffectedFixed inSource
glib< 2.86.32.86.3CNA
Red Hat Enterprise Linux 10see advisory0:2.80.4-10.el10_1.13CNA
Red Hat Enterprise Linux 10see advisory0:2.80.4-12.el10_2.13CNA
Red Hat Enterprise Linux 10.0 Extended Update Supportsee advisory0:2.80.4-4.el10_0.9CNA
Red Hat Enterprise Linux 7 Extended Lifecycle Supportsee advisory0:2.56.1-12.el7_9CNA
Red Hat Enterprise Linux 8see advisory0:2.70.1-9.el8_10CNA
Red Hat Enterprise Linux 8see advisory0:2.56.4-169.el8_10CNA
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportsee advisory0:2.56.4-10.el8_4.5CNA
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onsee advisory0:2.56.4-10.el8_4.5CNA
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportsee advisory0:2.56.4-158.el8_6.5CNA
Red Hat Enterprise Linux 8.6 Telecommunications Update Servicesee advisory0:2.56.4-158.el8_6.5CNA
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionssee advisory0:2.56.4-158.el8_6.5CNA
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat (CNA)5.6CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial