CVE-2025-13601Disclosure(gnome / ceph_storage)

🚨 HIGH - glib g_escape_uri_string() heap buffer overflow (CVE-2025-13601) A heap-based buffer overflow exists in glib’s g_escape_uri_string() function due to an incorrect buffer size calculation when escaping URI strings. The root cause is an integer overflow during escaped-length computation, leading to an undersized heap allocation and out-of-bounds writes during the escape operation. An attacker can exploit this by supplying an extremely large input string with many characters that require escaping to any application that passes untrusted data into g_escape_uri_string(), typically over network-facing inputs or file/content parsing paths without needing elevated privileges. Successful exploitation can crash the process (DoS) and, depending on allocator/layout and hardening, may enable code execution in the context of the vulnerable application. 👉 Affected: glib (versions not yet specified) | Upgrade to No fix yet - treat as suspicious