A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 4.8 · red hatNVD modified 2026-11-01 10:39
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 15
- https://access.redhat.com/errata/RHSA-2025:10855 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:11140 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:11327 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:11373 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:11374 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:11662 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:12275 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:13335 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:14988 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:14989 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:14990 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/errata/RHSA-2025:14991 vendor-advisory, x_refsource_redhat
- https://access.redhat.com/security/cve/CVE-2025-4373 vdb-entry, x_refsource_redhat
- https://bugzilla.redhat.com/show_bug.cgi?id=2364265 issue-tracking, x_refsource_redhat
- https://gitlab.gnome.org/GNOME/glib/-/issues/3677