CVE-2025-4373: Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
A flaw was found in GLib, which is vulnerable to an integer overflow in the gstringinsertunichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
Other sources
GLib prior to 2.84.2 is vulnerable to an integer overflow in the gstringinsertunichar() function. When the position at which to insert the character is large, the position will overflow, leading to buffer under-write.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4373?
CVE-2025-4373 has been classified as a moderate severity vulnerability due to the potential for buffer underwrites.
How do I fix CVE-2025-4373?
To fix CVE-2025-4373, update GLib to version 2.84.2 or later.
Which versions of GLib are affected by CVE-2025-4373?
GLib versions prior to 2.84.2 are affected by CVE-2025-4373.
What type of vulnerability is CVE-2025-4373?
CVE-2025-4373 is an integer overflow vulnerability that can lead to a buffer underwrite.
What function in GLib is associated with CVE-2025-4373?
CVE-2025-4373 is associated with the g_string_insert_unichar() function in GLib.