CVE-2025-14087
Medium · 5.6CVSS
5.6
EPSS
0.8%
Published
Dec 10, 2025
CISA due date
—
The record
A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | glib2.0 | 0 | 2.76.3-1.6.mga9 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Micro 5.3 | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Micro 5.4 | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Micro 5.5 | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | glib2 | 0 | 2.78.6-150600.4.25.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | glib2 | 0 | 2.78.6-150600.4.25.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | glib2 | 0 | 2.78.6-150600.4.25.1 |
| SUSE:Manager Proxy LTS 4.3 | glib2 | 0 | 2.70.5-150400.3.29.1 |
| SUSE:Manager Server LTS 4.3 | glib2 | 0 | 2.70.5-150400.3.29.1 |
| openSUSE:Leap 15.6 | glib2 | 0 | 2.78.6-150600.4.25.1 |
| openSUSE:Leap 15.6 | glib2-doc | 0 | 2.78.6-150600.4.25.1 |
| openSUSE:Leap 16.0 | glib2 | 0 | 2.84.4-160000.1.1 |
| openSUSE:Leap 16.0 | glib2-doc | 0 | 2.84.4-160000.1.1 |
Related vulnerabilities
- CVE-2026-0988 A flaw was found in glib. Also affects glib2.0
- CVE-2025-14512 A flaw was found in glib. Also affects glib2.0
- CVE-2025-13601 A heap-based buffer overflow problem was found in glib through an incorrect calculation… Also affects glib2.0
- CVE-2024-52533 gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant… Also affects glib2.0
- CVE-2024-34397 An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. Also affects glib2.0
- CVE-2026-1489 A flaw was found in GLib. Also affects glib2
- CVE-2026-1484 A flaw was found in the GLib Base64 encoding routine when processing very large input… Also affects glib2
- CVE-2026-1485 A flaw was found in Glib's content type parsing logic. Also affects glib2