CVE-2025-6052
CVE-2025-6052 · Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
CVSS 3.7 · Low · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
red hat enterprise linux 10
No fix published
red hat enterprise linux 10
No fix published
red hat enterprise linux 6
No fix published
red hat enterprise linux 7
No fix published
red hat enterprise linux 8
No fix published
red hat enterprise linux 9
No fix published
red hat enterprise linux 9
No fix published
glib2.0 Debian:13
- Affected ranges
- ECOSYSTEM: < 2.84.3-1
Update to 2.84.3-1
glib2.0 Debian:14
- Affected ranges
- ECOSYSTEM: < 2.84.3-1
Update to 2.84.3-1
glib2.0 Ubuntu:24.04:LTS
- Versions
- 2.78.0-2
- 2.78.1-4
- 2.78.3-1
- 2.78.3-2
- 2.79.1-1
- 2.79.2-1~ubuntu1
- 2.79.3-3ubuntu5
- 2.80.0-6ubuntu1
- 2.80.0-6ubuntu3
- 2.80.0-6ubuntu3.1
- 2.80.0-6ubuntu3.2
- 2.80.0-6ubuntu3.4
- 2.80.0-6ubuntu3.5
- Affected ranges
- ECOSYSTEM: < 2.80.0-6ubuntu3.6
Update to 2.80.0-6ubuntu3.6