CVE-2025-4373
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
Risk Assessment
An attacker could exploit this vulnerability to cause a denial of service or potentially execute arbitrary code, compromising data confidentiality and integrity.
Recommendation
Update GLib to the latest patched version immediately. If an update is not possible, restrict access to applications using the vulnerable function.
Original NVD description (English source)
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.