CVE-2025-13601

Q: What is the severity of CVE-2025-13601?

CVE-2025-13601 has a CVSS score of 7.7 (HIGH). A heap-based buffer overflow vulnerability in glib's g_escape_uri_string() function allows attackers to write beyond allocated memory boundaries when processing strings with many characters requiring escaping. This could lead to arbitrary code execution or application crashes. Systems using glib for URI escaping are affected.

7.7 HIGH

Denial of Service Buffer Overflow

📋 TL;DR

A heap-based buffer overflow vulnerability in glib's g_escape_uri_string() function allows attackers to write beyond allocated memory boundaries when processing strings with many characters requiring escaping. This could lead to arbitrary code execution or application crashes. Systems using glib for URI escaping are affected.

💻 Affected Systems

Products:

glib
Applications/libraries using glib for URI escaping

Versions: glib versions before the patched version (specific version not provided in CVE)

Operating Systems: Linux, Unix-like systems, Any OS using glib

Default Config Vulnerable: ⚠️ Yes

Notes: Any application calling g_escape_uri_string() with untrusted input is vulnerable. Common in web servers, APIs, and network services.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Remote code execution leading to complete system compromise, data theft, or ransomware deployment.

🟠

Likely Case

Application crashes causing denial of service, potentially leading to data corruption or service disruption.

🟢

If Mitigated

Limited impact with proper memory protections (ASLR, DEP) and application sandboxing, possibly just crashes.

🌐 Internet-Facing: HIGH - Any internet-facing service using glib for URI processing could be exploited remotely.

🏢 Internal Only: MEDIUM - Internal applications using glib are vulnerable but require internal network access.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Exploitation requires crafting specific input strings with many escapable characters. No public exploit code known at this time.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check Red Hat advisories for specific patched versions

Vendor Advisory: https://access.redhat.com/errata/RHSA-2026:0936

Restart Required: Yes

Instructions:

1. Check your glib version. 2. Apply vendor patches via package manager (yum update glib, apt-get upgrade libglib2.0). 3. Restart affected services or reboot system.

🔧 Temporary Workarounds

Input Validation

all

Validate and sanitize input before passing to g_escape_uri_string()

Implement input validation in application code

Memory Protection

linux

Enable ASLR and DEP to reduce exploit success

sysctl -w kernel.randomize_va_space=2
Check /proc/sys/kernel/exec-shield

🧯 If You Can't Patch

Isolate vulnerable systems in network segments with strict access controls
Implement web application firewall (WAF) rules to block malicious URI patterns

🔍 How to Verify

Check if Vulnerable:

Check glib version: rpm -q glib2 or dpkg -l libglib2.0-0

Check Version:

rpm -q glib2 --queryformat '%{VERSION}-%{RELEASE}\n' or dpkg -s libglib2.0-0 | grep Version

Verify Fix Applied:

Verify updated version matches patched version from Red Hat advisories

📡 Detection & Monitoring

Log Indicators:

Application crashes with segmentation faults
Unusual memory allocation patterns in system logs

Network Indicators:

Unusually long URI requests with many special characters
Repeated crash/restart patterns in services

SIEM Query:

source="application.logs" AND ("segmentation fault" OR "buffer overflow") AND process="*glib*"

📊 Metadata

CVE ID: CVE-2025-13601

CVSS v3 Score: 7.7 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CWE: CWE-190

EPSS Score: 0.03% exploit probability (8.2th percentile)

Published: November 26, 2025

Last Updated: March 5, 2026

🔗 References

https://access.redhat.com/errata/RHSA-2026:0936 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:0975 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:0991 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1323 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1324 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1326 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1327 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1465 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1608 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1624 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1625 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1626 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1627 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1652 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:1736 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2064 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2072 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2485 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2563 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2633 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2659 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2671 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2974
https://access.redhat.com/errata/RHSA-2026:3415
https://access.redhat.com/security/cve/CVE-2025-13601 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2416741 Issue Tracking,Vendor Advisory
https://gitlab.gnome.org/GNOME/glib/-/issues/3827 Exploit,Issue Tracking
https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914 Third Party Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Ceph Storage by Redhat

Codeready Linux Builder by Redhat

Codeready Linux Builder For Arm64 by Redhat

Codeready Linux Builder For Arm64 by Redhat

Codeready Linux Builder For Arm64 by Redhat

Codeready Linux Builder For Arm64 Eus by Redhat

Codeready Linux Builder For Arm64 Eus by Redhat

Codeready Linux Builder For Ibm Z Systems by Redhat

Codeready Linux Builder For Ibm Z Systems by Redhat

Codeready Linux Builder For Ibm Z Systems by Redhat

Codeready Linux Builder For Ibm Z Systems by Redhat

Codeready Linux Builder For Ibm Z Systems by Redhat

Codeready Linux Builder For Ibm Z Systems Eus by Redhat

Codeready Linux Builder For Power Little Endian by Redhat

Codeready Linux Builder For Power Little Endian by Redhat

Codeready Linux Builder For Power Little Endian by Redhat

Codeready Linux Builder For Power Little Endian by Redhat

Codeready Linux Builder For Power Little Endian by Redhat

Codeready Linux Builder For Power Little Endian Eus by Redhat

Codeready Linux Builder For X86 64 by Redhat

Codeready Linux Builder For X86 64 by Redhat

Codeready Linux Builder For X86 64 by Redhat

Codeready Linux Builder For X86 64 by Redhat

Codeready Linux Builder For X86 64 by Redhat

Codeready Linux Builder For X86 64 Eus by Redhat

Discovery by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 Eus by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems Eus by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian Eus by Redhat

Enterprise Linux For Power Little Endian Eus by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 by Redhat

Enterprise Linux For X86 64 Eus by Redhat

Enterprise Linux For X86 64 Eus by Redhat

Enterprise Linux For X86 64 Eus by Redhat

Enterprise Linux For X86 64 Eus by Redhat

Enterprise Linux For X86 64 Eus by Redhat

Enterprise Linux For X86 64 Eus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server For Power Little Endian by Redhat

Enterprise Linux Server For Power Little Endian by Redhat

Enterprise Linux Server For Power Little Endian by Redhat

Enterprise Linux Server For Power Little Endian by Redhat

Enterprise Linux Server For Power Little Endian by Redhat

Enterprise Linux Server For Power Little Endian Eus by Redhat

Enterprise Linux Server Tus by Redhat

Enterprise Linux Server Tus by Redhat

Glib by Gnome