CVE-2025-4373
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
- Score
- CVSS 3.1 4.8 Medium
- Status
- Deferred - secalert@redhat.com
- Published
- 2025-05-06
- Last modified
- 2026-10-15
- Weaknesses
- CWE-124
Affected products
- Enterprise Linux (Redhat)
- Insights Proxy (Redhat)
- Openshift Distributed Tracing (Redhat)
- Rhel Aus (Redhat)
- Rhel E4s (Redhat)
- Rhel Eus (Redhat)
- Rhel Eus Long Life (Redhat)
- Rhel Tus (Redhat)
- 12xfo (Siemens)
- 24xsfp (Siemens)
- 2x10g (Siemens)
- 8xfo (Siemens)
- 8xsfp (Siemens)
- Cc (Siemens)
- Ruggedcom Rst2428p (Siemens)
- Scalance Xc-300xr-300xc-400xr-500wgxr-500 Family (Siemens)
- Scalance Xch328 (Siemens)
- Scalance Xcm324 (Siemens)
- Scalance Xcm328 (Siemens)
- Scalance Xcm332 (Siemens)
- Scalance Xrh334 24 V Dc (Siemens)
- Scalance Xrm334 230 V Ac (Siemens)
- Scalance Xrm334 230v Ac (Siemens)
- Scalance Xrm334 24 V Dc (Siemens)
- Scalance Xrm334 24v Dc (Siemens)
- Scalance Xrm334 2x230 V Ac (Siemens)
- Scalance Xrm334 2x230v Ac (Siemens)
- Simatic S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)
- Simatic S7-1500 Cpu 1518f-4 Pndp Mfp (Siemens)
- Siplus S7-1500 Cpu 1518-4 Pndp Mfp (Siemens)
References
- https://access.redhat.com/errata/RHSA-2025:10855
- https://access.redhat.com/errata/RHSA-2025:11140
- https://access.redhat.com/errata/RHSA-2025:11327
- https://access.redhat.com/errata/RHSA-2025:11373
- https://access.redhat.com/errata/RHSA-2025:11374
- https://access.redhat.com/errata/RHSA-2025:11662
- https://access.redhat.com/errata/RHSA-2025:12275
- https://access.redhat.com/errata/RHSA-2025:13335
- https://access.redhat.com/errata/RHSA-2025:14988
- https://access.redhat.com/errata/RHSA-2025:14989
- https://access.redhat.com/errata/RHSA-2025:14990
- https://access.redhat.com/errata/RHSA-2025:14991
- https://access.redhat.com/security/cve/CVE-2025-4373
- https://bugzilla.redhat.com/show_bug.cgi?id=2364265
- https://gitlab.gnome.org/GNOME/glib/-/issues/3677
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-089022.html
