Back to CVE records
High 7.7Published Nov 26, 2025
CVE-2025-13601A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
Updated under an hour ago ()
Does this affect you?
It affects redhat codeready_linux_builder and 28 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
- CVSS
- 7.7 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Weakness (CWE)
- CWE-190
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Modified
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
redhat codeready_linux_builder redhat:codeready_linux_builder | 9.0 | NVD |
redhat codeready_linux_builder_for_ibm_z_systems redhat:codeready_linux_builder_for_ibm_z_systems | 9.0_s390x; 10.0_s390x; 8.0_s390x; 9.4_s390x; 9.6_s390x | NVD |
redhat codeready_linux_builder_for_power_little_endian redhat:codeready_linux_builder_for_power_little_endian | 9.0_ppc64le; 10.0_ppc64le; 8.0_ppc64le; 9.4_ppc64le; 9.6_ppc64le | NVD |
redhat codeready_linux_builder_for_x86_64 redhat:codeready_linux_builder_for_x86_64 | 9.0; 10.0; 8.0; 9.4; 9.6 | NVD |
redhat enterprise_linux_for_arm_64 redhat:enterprise_linux_for_arm_64 | 9.0; 10.0; 8.0; 9.2; 9.4; 9.6 | NVD |
redhat enterprise_linux_for_ibm_z_systems redhat:enterprise_linux_for_ibm_z_systems | 9.0_s390x; 10.0_s390x; 8.0_s390x; 9.2_s390x; 9.4_s390x; 9.6_s390x | NVD |
redhat enterprise_linux_for_power_little_endian redhat:enterprise_linux_for_power_little_endian | 9.0_ppc64le; 10.0_ppc64le; 8.0_ppc64le; 9.2_ppc64le; 9.4_ppc64le; 9.6_ppc64le | NVD |
redhat enterprise_linux_for_x86_64 redhat:enterprise_linux_for_x86_64 | 9.0; 10.0; 8.0; 9.2; 9.4; 9.6; 8.6; 8.8 | NVD |
redhat codeready_linux_builder_for_arm64 redhat:codeready_linux_builder_for_arm64 | 10.0; 8.0; 9.6 | NVD |
redhat enterprise_linux_server_aus redhat:enterprise_linux_server_aus | 9.2; 9.4; 9.6; 8.6; 8.4; 8.2 | NVD |
redhat codeready_linux_builder_for_arm64_eus redhat:codeready_linux_builder_for_arm64_eus | 9.4; 10.0 | NVD |
redhat enterprise_linux_for_x86_64_eus redhat:enterprise_linux_for_x86_64_eus | 9.4; 10.0; 9.6; 8.6; 8.8; 8.4 | NVD |
redhat enterprise_linux_server_for_power_little_endian redhat:enterprise_linux_server_for_power_little_endian | 9.4_ppc64le; 10.0_ppc64le; 9.6_ppc64le; 8.6_ppc64le; 8.8_ppc64le | NVD |
redhat enterprise_linux_server_for_power_little_endian_eus redhat:enterprise_linux_server_for_power_little_endian_eus | 9.4_ppc64le | NVD |
redhat codeready_linux_builder_for_ibm_z_systems_eus redhat:codeready_linux_builder_for_ibm_z_systems_eus | 10.0_s390x | NVD |
redhat codeready_linux_builder_for_power_little_endian_eus redhat:codeready_linux_builder_for_power_little_endian_eus | 10.0_ppc64le | NVD |
redhat codeready_linux_builder_for_x86_64_eus redhat:codeready_linux_builder_for_x86_64_eus | 10.0 | NVD |
redhat enterprise_linux_for_arm_64_eus redhat:enterprise_linux_for_arm_64_eus | 10.0 | NVD |
redhat enterprise_linux_for_ibm_z_systems_eus redhat:enterprise_linux_for_ibm_z_systems_eus | 10.0_s390x | NVD |
redhat enterprise_linux_for_power_little_endian_eus redhat:enterprise_linux_for_power_little_endian_eus | 10.0_ppc64le; 9.6_ppc64le | NVD |
redhat enterprise_linux_server_tus redhat:enterprise_linux_server_tus | 8.6; 8.8 | NVD |
redhat ceph_storage redhat:ceph_storage | 8.0 | NVD |
redhat discovery redhat:discovery | 2.0 | NVD |
gnome glib gnome:glib | before 2.86.3 | NVD |
redhat openshift_container_platform redhat:openshift_container_platform | 4.12; 4.16; 4.17; 4.18; 4.19 | NVD |
redhat openshift_container_platform_for_arm64 redhat:openshift_container_platform_for_arm64 | 4.12; 4.16; 4.17; 4.18; 4.19 | NVD |
redhat openshift_container_platform_for_ibm_z redhat:openshift_container_platform_for_ibm_z | 4.12; 4.16; 4.17; 4.18; 4.19 | NVD |
redhat openshift_container_platform_for_linuxone redhat:openshift_container_platform_for_linuxone | 4.12; 4.16; 4.17; 4.18; 4.19 | NVD |
redhat openshift_container_platform_for_power redhat:openshift_container_platform_for_power | 4.12; 4.16; 4.17; 4.18; 4.19 | NVD |
References
- https://access.redhat.com/errata/RHSA-2026:0936vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:0975vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:0991vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1323vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1324vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1326vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1327vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1465vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1608vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1624vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1625vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1626vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1627vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1652vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:1736vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:18344
- https://access.redhat.com/errata/RHSA-2026:18705
- https://access.redhat.com/errata/RHSA-2026:2064vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:2072vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:2485vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:2563vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:2633vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:2659vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:2671vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:2974
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.