CVE-2025-4373: Red Hat Enterprise Linux 10

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

Affected products

Red Hat Red Hat Enterprise Linux 10: before 0:2.80.4-4.el10_0.6 (fixed in 0:2.80.4-4.el10_0.6)
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8: before 0:2.56.4-166.el8_10 (fixed in 0:2.56.4-166.el8_10)
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support: before 0:2.56.4-8.el8_2.2 (fixed in 0:2.56.4-8.el8_2.2)
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: before 0:2.56.4-10.el8_4.2 (fixed in 0:2.56.4-10.el8_4.2)
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: before 0:2.56.4-10.el8_4.2 (fixed in 0:2.56.4-10.el8_4.2)
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: before 0:2.56.4-158.el8_6.2 (fixed in 0:2.56.4-158.el8_6.2)
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service: before 0:2.56.4-158.el8_6.2 (fixed in 0:2.56.4-158.el8_6.2)
Red Hat Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions: before 0:2.56.4-158.el8_6.2 (fixed in 0:2.56.4-158.el8_6.2)
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: before 0:2.56.4-162.el8_8 (fixed in 0:2.56.4-162.el8_8)
Red Hat Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions: before 0:2.56.4-162.el8_8 (fixed in 0:2.56.4-162.el8_8)
Red Hat Red Hat Enterprise Linux 9: before 0:2.68.4-16.el9_6.2 (fixed in 0:2.68.4-16.el9_6.2)
Red Hat Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions: before 0:2.68.4-5.el9_0.2 (fixed in 0:2.68.4-5.el9_0.2)
Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:2.68.4-7.el9_2.2 (fixed in 0:2.68.4-7.el9_2.2)
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: before 0:2.68.4-14.el9_4.3 (fixed in 0:2.68.4-14.el9_4.3)
Red Hat Red Hat Insights Proxy 1.5: before 1.5.5-1754504343 (fixed in 1.5.5-1754504343)
Red Hat Red Hat Openshift Distributed Tracing 3.6.0
Siemens Ruggedcom RST2428P: before V3.3 (fixed in V3.3)
Siemens Scalance Xc-300/xr-300/xc-400/xr-500wg/xr-500 Family: before V3.3 (fixed in V3.3)
Siemens Scalance XCH328: before V3.3 (fixed in V3.3)
Siemens Scalance XCM324: before V3.3 (fixed in V3.3)
Siemens Scalance XCM328: before V3.3 (fixed in V3.3)
Siemens Scalance XCM332: before V3.3 (fixed in V3.3)
Siemens Scalance XRH334 24 V Dc, 8xfo, Cc: before V3.3 (fixed in V3.3)
and 12 more

Published 2025-05-06. Last modified 2026-09-21.