Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
glib versions before 2.78.6-6 can crash or be abused
published 10 months ago
Summary
The glib library used in Azure's glib package can overflow memory when it processes specially crafted file or remote filesystem attribute data. This can cause the application to stop working or be taken over by an attacker. Upgrade glib to version 2.78.6-6 or later to fix the issue.
What to do
- Update azure glib to version 2.78.6-6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | glib |
< 2.78.6-6 Fix: upgrade to 2.78.6-6
|
Original advisory text
CVE-2025-14512 affecting package glib for versions less than 2.78.6-6
A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribute values.
References
Timeline
Published11 Dec 2025
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-72286 · OSV
Track software like this
Free during beta