Medium USN-7532-1 1 CVE

glib2.0 vulnerability

Published May 26, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Glib incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash
or execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	glib2.0	2.64.6-1~ubuntu20.04.9
Ubuntu · 22.04 LTS 22.04:LTS	glib2.0	2.72.4-0ubuntu2.5
Ubuntu · 24.04 LTS 24.04:LTS	glib2.0	2.80.0-6ubuntu3.4

Vulnerabilities 1

Medium 4.8

CVE-2025-4373

Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

May 6, 2025

References

report
https://ubuntu.com/security/CVE-2025-4373