BaseFortify

Publication date: 2025-11-26

Last updated on: 2026-06-30

Assigner: Red Hat, Inc.

Description

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-26

Last Modified

2026-06-30

Generated

2026-07-06

AI Q&A

2025-11-26

EPSS Evaluated

2026-07-05

NVD

CVE-2025-13601

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	openshift_container_platform_for_power	4.12
redhat	openshift_container_platform	4.12
redhat	openshift_container_platform_for_linuxone	4.12
redhat	openshift_container_platform_for_arm64	4.12
redhat	openshift_container_platform	4.17
redhat	openshift_container_platform	4.16
redhat	openshift_container_platform_for_ibm_z	4.12
redhat	openshift_container_platform_for_arm64	4.16
redhat	openshift_container_platform_for_ibm_z	4.16
redhat	openshift_container_platform_for_linuxone	4.16
redhat	openshift_container_platform_for_power	4.16
redhat	openshift_container_platform	4.18
redhat	openshift_container_platform_for_arm64	4.17
redhat	openshift_container_platform_for_arm64	4.18
redhat	openshift_container_platform_for_ibm_z	4.17
redhat	openshift_container_platform_for_ibm_z	4.18
redhat	openshift_container_platform_for_linuxone	4.17
redhat	openshift_container_platform_for_linuxone	4.18
redhat	openshift_container_platform_for_power	4.17
redhat	openshift_container_platform_for_power	4.18
redhat	openshift_container_platform	4.19
redhat	openshift_container_platform_for_arm64	4.19
redhat	openshift_container_platform_for_ibm_z	4.19
redhat	openshift_container_platform_for_linuxone	4.19
redhat	openshift_container_platform_for_power	4.19

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-190	The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap-based buffer overflow in the glib library's g_escape_uri_string() function. It occurs because the function incorrectly calculates the buffer size needed when escaping a string that contains a very large number of characters requiring escaping. This miscalculation can cause the length calculation to overflow, leading to writing beyond the allocated memory buffer.

Impact Analysis

The vulnerability can lead to a heap-based buffer overflow, which may allow an attacker to write data beyond the allocated buffer. This can result in potential memory corruption, causing application crashes or enabling an attacker to execute arbitrary code, thereby compromising the integrity and availability of the affected system.

Hi! I’m here to help you understand CVE-2025-13601. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70