CVE detail
CVE-2025-14512
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
21 source links · newest first
- https://gitlab.gnome.org/GNOME/glib/-/issues/3845gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgDec 11, 2025, 7:16 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2421339bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/security/cve/CVE-2025-14512access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:7461access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:29197access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:25096access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:22634access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:21275access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19567access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19565access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19524access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19523access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19460access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19459access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19457access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19452access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19361access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:19148access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:15971access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:15969access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM - https://access.redhat.com/errata/RHSA-2026:15953access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comDec 11, 2025, 7:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-35092CVSS 7.5 · High
A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagra…
- CVE-2025-14087CVSS 5.6 · Medium
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer…
- CVE-2016-5766CVSS 8.8 · High
Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7…
- CVE-2013-1913CVSS 6.8 · Medium
Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to…
- CVE-2026-58384CVSS 7.3 · High
A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation for the RLE row-length table, after which subsequent per-r…
- CVE-2026-59089CVSS 5.5 · Medium
A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calculates the size of the Color Look-Up Table (CLUT) due to an…