--- id: CVE-2025-4373 title: >- A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function summary: >- A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. severity: medium cvss: 4.8 cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L' cwe: - CWE-124 vendor: Red Hat product: glib affected: - glib < 2.84.2 - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - insights-proxy/insights-proxy-container-rhel9 (all versions) - rhosdt/jaeger-agent-rhel8 (all versions) - rhosdt/jaeger-all-in-one-rhel8 (all versions) - rhosdt/jaeger-collector-rhel8 (all versions) - rhosdt/jaeger-es-index-cleaner-rhel8 (all versions) - rhosdt/jaeger-es-rollover-rhel8 (all versions) - rhosdt/jaeger-ingester-rhel8 (all versions) - rhosdt/jaeger-operator-bundle (all versions) - rhosdt/jaeger-query-rhel8 (all versions) - rhosdt/jaeger-rhel8-operator (all versions) - bootc (all versions) - glycin-loaders (all versions) - loupe (all versions) - mingw-glib2 (all versions) - glib2 (all versions) - glib2 (all versions) - librsvg2 (all versions) - mingw-glib2 (all versions) - bootc (all versions) - librsvg2 (all versions) - mingw-glib2 (all versions) patched: - enterprise_linux_appstream_v_10 - enterprise_linux_appstream_e4s_v_9_0 - enterprise_linux_appstream_e4s_v_9_2 - enterprise_linux_appstream_eus_v_9_4 - enterprise_linux_appstream_v_9 - enterprise_linux_baseos_v_10 - enterprise_linux_baseos_v_8 - enterprise_linux_baseos_aus_v_8_2 - enterprise_linux_baseos_aus_v_8_4 - enterprise_linux_baseos_eus_extension_v_8_4 - enterprise_linux_baseos_aus_v_8_6 - enterprise_linux_baseos_e4s_v_8_6 - enterprise_linux_baseos_tus_v_8_6 - enterprise_linux_baseos_e4s_v_8_8 - enterprise_linux_baseos_tus_v_8_8 - enterprise_linux_baseos_e4s_v_9_0 - enterprise_linux_baseos_e4s_v_9_2 - enterprise_linux_baseos_eus_v_9_4 - enterprise_linux_baseos_v_9 - enterprise_linux_codeready_linux_builder_v_10 - enterprise_linux_crb_v_8 - codeready_linux_builder_eus_v_9_4 - enterprise_linux_codeready_linux_builder_v_9 - insights_proxy 1.5 - openshift_distributed_tracing 3.6.1 published: '2025-05-06' updated: '2026-09-21' sourceUpdated: '2026-09-21T18:17:05.667' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-4373' references: - url: 'https://access.redhat.com/errata/RHSA-2025:10855' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:11140' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:11327' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:11373' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:11374' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:11662' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:12275' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:13335' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:14988' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:14989' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:14990' label: secalert@redhat.com - url: 'https://access.redhat.com/errata/RHSA-2025:14991' label: secalert@redhat.com - url: 'https://access.redhat.com/security/cve/CVE-2025-4373' label: secalert@redhat.com - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2364265' label: secalert@redhat.com - url: 'https://gitlab.gnome.org/GNOME/glib/-/issues/3677' label: secalert@redhat.com - url: 'https://cert-portal.siemens.com/productcert/html/ssa-082556.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: 'https://cert-portal.siemens.com/productcert/html/ssa-089022.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e - url: >- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4373.json - url: 'https://www.cve.org/CVERecord?id=CVE-2025-4373' - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-4373' tags: - nvd - cve.org - csaf - vex - red-hat epss: 0.0053 epssPercentile: 0.43784 ssvc: exploitation: none automatable: 'no' technicalImpact: partial timestamp: '2025-05-06T15:09:21.791020Z' ingestedAt: '2026-06-29T13:24:34.202Z' --- ## Overview A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. ## Remediation Refer to the linked advisories for vendor-supplied fixes and affected version ranges. ## Vendor advisories - **RHSA-2025:10855** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2025-07-14 · [advisory](https://access.redhat.com/errata/RHSA-2025:10855) - **RHSA-2025:12275** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0) · released 2025-07-30 · [advisory](https://access.redhat.com/errata/RHSA-2025:12275) - **RHSA-2025:11373** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2) · released 2025-07-17 · [advisory](https://access.redhat.com/errata/RHSA-2025:11373) - **RHSA-2025:11374** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat CodeReady Linux Builder EUS (v.9.4) · released 2025-07-17 · [advisory](https://access.redhat.com/errata/RHSA-2025:11374) - **RHSA-2025:11140** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) · released 2025-07-15 · [advisory](https://access.redhat.com/errata/RHSA-2025:11140) - **RHSA-2025:11327** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8) · released 2025-07-16 · [advisory](https://access.redhat.com/errata/RHSA-2025:11327) - **RHSA-2025:14991** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v. 8.2) · released 2025-09-02 · [advisory](https://access.redhat.com/errata/RHSA-2025:14991) - **RHSA-2025:14990** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) · released 2025-09-02 · [advisory](https://access.redhat.com/errata/RHSA-2025:14990) - **RHSA-2025:14988** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6) · released 2025-09-02 · [advisory](https://access.redhat.com/errata/RHSA-2025:14988) - **RHSA-2025:14989** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8) · released 2025-09-02 · [advisory](https://access.redhat.com/errata/RHSA-2025:14989) - **RHSA-2025:13335** · Red Hat · fixed in: Red Hat Insights proxy 1.5 · released 2025-08-07 · [advisory](https://access.redhat.com/errata/RHSA-2025:13335) - **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, … · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-4373.json)