CVE-2025-13601

CVE-2025-13601 · Glib: integer overflow in in g_escape_uri_string()

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

CVSS 7.7 · High · EPSS 0.3% · Fix available

Published

2025-11-26T14:44:22.680Z

Updated

2026-08-31T17:02:14.891Z

Stack: system

Check your server →