CVE-2025-60018
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
The OpenSSL backend in glib-networking fails to properly check the return value of a call to BIO_write(), resulting in an out-of-bounds read.
Risk Assessment
This vulnerability could allow an attacker to read sensitive data from memory or cause a crash in applications using glib-networking.
Recommendation
It is recommended to immediately update glib-networking to the latest available version containing the fix.
Other vulnerabilities in glib-networking
See all- CVE-2026-10028Medium
A flaw was found in glib-networking where a specially crafted certificate chain with circular issuer relationships causes an infinite loop during certificate verification. This leads to excessive CPU consumption and denial of service for the affected process.
- CVE-2025-60019Low
The OpenSSL backend in glib-networking fails to properly check the return values of memory allocation routines. An out-of-memory condition could potentially result in writing to an invalid memory location.
Original NVD description (English source)
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.