PatchRadar

← Browse

CVE-2025-14512

Low

No strong exploitation signal.

CVSS base
6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS — probability of exploitation (30 days)
0.6%
46.3th percentile
CISA KEV
Not listed
Weakness / dates
CWE-190
Published 2025-12-11 · modified 2026-09-01

CVSS breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack VectorNNetwork
Attack ComplexityLLow
Privileges RequiredNNone
User InteractionRRequired
ScopeUUnchanged
ConfidentialityNNone
IntegrityNNone
AvailabilityHHigh

Timeline

Description

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.

Affected

gnome redhat

References

Official: NVD · CVE.org