CVE-2025-6052
Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
Reserved 2025-06-13 | Published 2025-06-13 | Updated 2025-06-13 | Assigner redhatInteger Overflow or Wraparound
| 2025-06-13: | Reported to Red Hat. |
| 2025-06-13: | Made public. |
Red Hat would like to thank Philip Withnall for reporting this issue.
access.redhat.com/security/cve/CVE-2025-6052
bugzilla.redhat.com/show_bug.cgi?id=2372666 (RHBZ#2372666)
Support options
