CVE-2025-14512 Details

A heap buffer overflow vulnerability has been identified in GLib, specifically within the GIO (GLib Input/Output) escape_byte_string() function. This vulnerability arises from an integer overflow that occurs when the function processes malicious file or remote filesystem attribute values. The integer overflow leads to improper memory allocation, allowing an attacker to craft inputs that cause the escaping loop to write beyond the allocated buffer. As a result, this vulnerability can be exploited to create a denial-of-service condition by crashing the affected process.