CVE-2025-14512

Description

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

CVSS breakdown

Affected products

• GNOME / GLib0 – 2.86.3
• GNOME / GLib2.86.3
• RedHat / enterprise_linux7.0 – 7.0
• RedHat / enterprise_linux10.0 – 10.0
• RedHat / enterprise_linux8.0 – 8.0
• RedHat / enterprise_linux9.0 – 9.0
• RedHat / openshift4.0 – 4.0

References

• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:15953
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:15969
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:15971
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19148
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19361
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19452
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19457
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19459
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19460
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19523
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19524
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19565
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:19567
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:21275
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:22634
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:25096
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:29197
• VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:7461
• VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-14512
• MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2421339
• MISChttps://gitlab.gnome.org/GNOME/glib/-/issues/3845