CVE-2025-6052 LOW

CVE-2025-6052: Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

Vendor Red Hat
Product Red Hat Enterprise Linux 10
Weakness CWE-190
Published June 13, 2025
Last update June 2, 2026

CVSS base score

3.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.

Key dates

02Disclosure timeline

June 13, 2025 CVE published
June 2, 2026 Record updated