CVE-2025-7039 LOW

CVE-2025-7039: Glib: buffer under-read on glib through glib/gfileutils.c via get_tmp_file()

Vendor Red Hat
Product Red Hat Enterprise Linux 10
Weakness CWE-22 · Path traversal
Published September 3, 2025
Last update June 2, 2026

CVSS base score

3.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to potentially perform path traversal or access private temporary file content by creating symbolic links. This vulnerability allows a local attacker to manipulate file paths and access unauthorized data. The core issue stems from insufficient validation of file path lengths during temporary file operations.

Key dates

02Disclosure timeline

September 3, 2025 CVE published
June 2, 2026 Record updated