CVE detail
CVE-2025-4373
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 28.9 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
17 source links · newest first
- https://cert-portal.siemens.com/productcert/html/ssa-089022.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comMay 6, 2025, 3:16 PM - https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comMay 6, 2025, 3:16 PM - https://gitlab.gnome.org/GNOME/glib/-/issues/3677gitlab.gnome.org
No excerpt available.
Exploitgitlab.gnome.orgMay 6, 2025, 3:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2364265bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/security/cve/CVE-2025-4373access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:14991access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:14990access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:14989access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:14988access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:13335access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:12275access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:11662access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:11374access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:11373access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:11327access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:11140access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM - https://access.redhat.com/errata/RHSA-2025:10855access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 6, 2025, 3:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-16439CVSS 5.8 · Medium
In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.
- CVE-2026-26199CVSS 5.9 · Medium
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If `H5Iget_name` is invoked on a group id with `0` for the size parameter,…
- CVE-2026-44631CVSS 9.8 · Critical
Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. User…
- CVE-2024-36343CVSS 4.6 · Medium
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited sectio…
- CVE-2026-34253CVSS 8.2 · High
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in t…
- CVE-2026-5089CVSS 7.3 · High
YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both int#base60 and float#…