CVE-2025-60019

Published: Sep 25, 2025Modified: Jun 30, 2026Deferred

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.2 / Impact: 1.4

Source: secalert@redhat.com (Secondary)

Description

glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location.

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (3)

https://access.redhat.com/security/cve/CVE-2025-60019

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2398140

Source: secalert@redhat.com

https://gitlab.gnome.org/GNOME/glib-networking/-/issues/227

Source: secalert@redhat.com

Timeline

No history available yet.