Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63912.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-63912
Upstream
Published
2025-06-13T16:15:28Z
Modified
2026-04-01T05:20:13.463882Z
Summary
CVE-2025-6052 affecting package glib for versions less than 2.78.6-3
Details

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.

References

Affected packages

Azure Linux:3 / glib

Package

Name
glib
Purl
pkg:rpm/azure-linux/glib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.78.6-3

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-63912.json"