A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
References
Configurations
No configuration.
History
No history.
Information
Published : 2025-11-26 15:15
Updated : 2026-02-02 23:15
NVD link : CVE-2025-13601
Mitre link : CVE-2025-13601
CVE.ORG link : CVE-2025-13601
JSON object : View
Products Affected
No product.
CWE
CWE-190
Integer Overflow or Wraparound