CVE-2025-14087

critical

Description

A flaw was found in GLib (Gnome Lib). This vulnerability allows a remote attacker to cause heap corruption, leading to a denial of service or potential code execution via a buffer-underflow in the GVariant parser when processing maliciously crafted input strings.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2419093

https://access.redhat.com/security/cve/CVE-2025-14087

https://access.redhat.com/errata/RHSA-2026:82888

https://access.redhat.com/errata/RHSA-2026:82857

https://access.redhat.com/errata/RHSA-2026:82372

https://access.redhat.com/errata/RHSA-2026:82354

https://access.redhat.com/errata/RHSA-2026:82347

https://access.redhat.com/errata/RHSA-2026:82322

https://access.redhat.com/errata/RHSA-2026:82304

https://access.redhat.com/errata/RHSA-2026:74674

https://access.redhat.com/errata/RHSA-2026:7461

https://access.redhat.com/errata/RHSA-2026:72502

https://access.redhat.com/errata/RHSA-2026:58981

https://access.redhat.com/errata/RHSA-2026:49512

https://access.redhat.com/errata/RHSA-2026:29197

https://access.redhat.com/errata/RHSA-2026:25096

https://access.redhat.com/errata/RHSA-2026:22634

https://access.redhat.com/errata/RHSA-2026:21275

https://access.redhat.com/errata/RHSA-2026:19567

https://access.redhat.com/errata/RHSA-2026:19566

https://access.redhat.com/errata/RHSA-2026:19565

https://access.redhat.com/errata/RHSA-2026:19524

https://access.redhat.com/errata/RHSA-2026:19523

https://access.redhat.com/errata/RHSA-2026:19460

https://access.redhat.com/errata/RHSA-2026:19459

https://access.redhat.com/errata/RHSA-2026:19457

https://access.redhat.com/errata/RHSA-2026:19452

https://access.redhat.com/errata/RHSA-2026:19361

https://access.redhat.com/errata/RHSA-2026:19148

https://access.redhat.com/errata/RHSA-2026:15971

https://access.redhat.com/errata/RHSA-2026:15969

https://access.redhat.com/errata/RHSA-2026:15953

Details

Source: Mitre, NVD

Published: 2025-12-10

Updated: 2026-10-14

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00826