CVE-2025-13601EPSS p25.3%
CVE-2025-13601CVE-2025-13601
redhat / codeready_linux_builder
Description
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
Scoring
| CVSS | 7.7 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| EPSS | 0.33% probability of exploitation · percentile 25.3% · 2026-08-03T12:00:16Z |
| Last modified | 2026-06-30 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.