CVE-2025-60018
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-25

Last updated on: 2025-09-26

Assigner: Red Hat, Inc.

Description
glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-25
Last Modified
2025-09-26
Generated
2026-06-16
AI Q&A
2025-09-25
EPSS Evaluated
2026-06-15
NVD
CVE-2025-60018
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
glib glib-networking *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs in glib-networking's OpenSSL backend where it fails to properly check the return value of a call to BIO_write(). This improper check can lead to an out of bounds read, which means the software may read memory outside the intended buffer boundaries.

Impact Analysis

The vulnerability can lead to an out of bounds read, which may cause information disclosure or application instability. According to the CVSS score, it has a low impact on confidentiality and availability, with no impact on integrity, and requires network access with high attack complexity and no privileges or user interaction.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-60018. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart