CVE-2025-4373

CVE Enrichment

CVSS: 4.8 MEDIUM
EPSS: 0.64%
EPSS Percentile: 49.89%
CISA KEV: Not listed

Description

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 06-May-2025 22:16
Last Modified: 22-Sep-2026 01:17
EPSS Date: 2026-10-24
CWE: CWE-124

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:H /
                            PR:N /
                            UI:N /
                            S:U /
                            C:N /
                            I:L /
                            A:L

References

Last enrichment sync: 25-Oct-2026 04:58
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (2)

For example, debian:bookworm ships a patched glib2.0 for CVE-2025-4373, which Debian fixed in Trixie and Sid but not Bookworm. The Aikido Images variant of debian:bookworm carries the patched glib2.0 that closes it. Minimus Registry Shutdown Prompts Search for Container Image Alternatives
For example, debian:bookworm ships a patched glib2.0 for CVE-2025-4373, which Debian fixed in Trixie/Sid but not Bookworm. The Aikido Images variant of debian:bookworm contains a patched version of glib2.0 that fixes Container Image Hardening Tools Compared for 2026

Vendors (7)

Products (8)

Tools (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.