CVE-2025-13601

Description

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

PUBLISHED Reserved 2025-11-24 | Published 2025-11-26 | Updated 2025-11-26 | Assigner redhat

Problem types

Integer Overflow or Wraparound

Product status

Timeline

References

access.redhat.com/security/cve/CVE-2025-13601 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2416741 (RHBZ#2416741) issue-tracking

gitlab.gnome.org/GNOME/glib/-/issues/3827

gitlab.gnome.org/GNOME/glib/-/merge_requests/4914

cve.org (CVE-2025-13601)

nvd.nist.gov (CVE-2025-13601)

Download JSON