CVE-2025-6052
LOWGLib - Memory Corruption
Title source: llmDescription
A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.
Scores
CVSS v3
3.7
EPSS
0.0008
EPSS Percentile
22.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Classification
CWE
CWE-190
Status
published
Affected Products (1)
gnome/glib
< 2.84.3
Timeline
Published
Jun 13, 2025
Tracked Since
Feb 18, 2026