← Back

CVE-2025-14087

nvd nist
Published: Dec 10, 2025Modified: Jul 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

Affected (5)

1 product
Glib
1 product
Enterprise Linux
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Before 2.86.3
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Version 10.0
Version 7.0
Version 8.0
Version 9.0

References (22)

Source: secalert@redhat.com
MitigationThird Party Advisory
Source: secalert@redhat.com
Issue TrackingThird Party Advisory

Timeline

No history available yet.