CVE-2025-13601EPSS p19.0%
CVE-2025-13601CVE-2025-13601
redhat / codeready_linux_builder
Description
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
Scoring
| CVSS | 7.7 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H |
| EPSS | 0.27% probability of exploitation · percentile 19.0% · 2026-06-18T12:00:27Z |
| Last modified | 2026-06-02 |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.