# CVE-2025-13601

## Summary

- **CVE ID:** CVE-2025-13601
- **Severity:** HIGH
- **CVSS Score:** 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
- **CWE:** CWE-190
- **Published:** Nov 26, 2025
- **Last Modified:** Aug 31, 2026

## Description

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.

## Affected Products

- Unknown product (0)
- Red Hat — Red Hat Enterprise Linux 10 (0:2.80.4-10.el10_1.12)
- Red Hat — Red Hat Enterprise Linux 10.0 Extended Update Support (0:2.80.4-4.el10_0.8)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:2.56.1-11.el7_9)
- Red Hat — Red Hat Enterprise Linux 8 (0:2.56.4-168.el8_10)
- Red Hat — Red Hat Enterprise Linux 8.2 Advanced Update Support (0:2.56.4-8.el8_2.4)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:2.56.4-10.el8_4.4)
- Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:2.56.4-10.el8_4.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:2.56.4-158.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:2.56.4-158.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:2.56.4-158.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:2.56.4-164.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:2.56.4-164.el8_8)
- Red Hat — Red Hat Enterprise Linux 9 (0:2.68.4-18.el9_7.1)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:2.68.4-5.el9_0.4)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:2.68.4-7.el9_2.4)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:2.68.4-14.el9_4.5)
- Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:2.68.4-16.el9_6.4)
- Red Hat — Red Hat OpenShift Container Platform 4.12 (412.86.202602021310-0)
- Red Hat — Red Hat OpenShift Container Platform 4.13 (413.92.202602240113-0)
- Red Hat — Red Hat OpenShift Container Platform 4.14 (414.92.202602171627-0)
- Red Hat — Red Hat OpenShift Container Platform 4.16 (416.94.202602101357-0)
- Red Hat — Red Hat OpenShift Container Platform 4.17 (417.94.202602090846-0)
- Red Hat — Red Hat OpenShift Container Platform 4.18 (418.94.202602022246-0)
- Red Hat — Red Hat OpenShift Container Platform 4.19 (9.6.20260211-0)
- Red Hat — Red Hat Ceph Storage 8 (sha256:97a60239048123bc963d7c9ac2ad85caa6a254759e44c15f173ca12ea51e4719)
- Red Hat — Red Hat Discovery 2 (sha256:d4d6cd6b1a84587ee851c4f76b47c1e6bf9f597f4a476c34e4a257cd1a860448)
- Red Hat — Red Hat Discovery 2 (sha256:4ba29e3e7565cfdfdedcc558bc8495398cee07742fda133b0bc04fd657b908cd)
- Red Hat — Red Hat Insights proxy 1.5 (sha256:975a1e501a8520df83f3f4114e72a71384ff1866ec99c7a45fffbf8c76ef5cbc)
- Red Hat — Red Hat Update Infrastructure 5 (sha256:83e8b356eb4697a81ff8c6764dc976862800f4c78122a606173340a6e105a4fe)
- Red Hat — Red Hat Update Infrastructure 5 (sha256:409a64405669fd11ad8700356243762a3507430f9bba4100bb92765d4482b7e5)
- Red Hat — Red Hat Update Infrastructure 5 (sha256:48cf7cf48dfadb17f9357bf1894a5d0393551a893faa8b0ea0e11fe1ffed497f)
- Red Hat — Red Hat Update Infrastructure 5 (sha256:df709663b581b740006c6ea4b297978932874eade1563c3952e0594e926aa5f8)
- Red Hat — Red Hat OpenShift Container Platform 4.15 (415.92.202603101737-0)
- Red Hat — Red Hat OpenShift Container Platform 4.19 (4.19.9.6.202602112047-0)
- Red Hat — Red Hat Ceph Storage 8 (sha256:9e4f3ffb68eae556a6d34426903430173e4563eea3ea5d6720ce9b5b43c2dbda)
- Red Hat — Red Hat Discovery 2 (sha256:519d4fe184cebe5152f840e9f609fa4705590656ac9bcace2e2e17622ab7e6a8)
- Red Hat — Red Hat Insights proxy 1.5 (sha256:ab86ba36e62e8aec5ba48e9e0076b1f8086c48157c85990be0e2ce3e03273016)
- Red Hat — Red Hat Ceph Storage 8 (sha256:09aaeba975aa74bdf95d63e5619c0cabb1cd9e1410aa34e7f8ecf24a5e291d1a)
- Red Hat — Red Hat Discovery 2 (sha256:26bb49a8e2e695d61192f04eb0db63efa8210bba20ea22b60e4e22d519d8b9e6)
- Red Hat — Red Hat Hardened Images (2.88.0-1.1.hum1)
- Red Hat — Red Hat Enterprise Linux 10 (0:2.87.0-1.el10)
- Red Hat — Red Hat Ceph Storage 8 (1769512383)
- Red Hat — Red Hat Discovery 2 (1769104765)
- Red Hat — Red Hat Discovery 2 (1769111774)
- Red Hat — Red Hat Insights proxy 1.5 (1770740405)
- Red Hat — Red Hat Update Infrastructure 5 (1770808689)
- Red Hat — Red Hat Update Infrastructure 5 (1770807477)
- Red Hat — Red Hat Update Infrastructure 5 (1770646925)
- Red Hat — Red Hat Update Infrastructure 5 (1770808765)
- Red Hat — Red Hat Enterprise Linux 9 (0:2.78.6-3.el9)

## References

- [CNA](https://access.redhat.com/errata/RHSA-2026:0936)
- [CNA](https://access.redhat.com/errata/RHSA-2026:0975)
- [CNA](https://access.redhat.com/errata/RHSA-2026:0991)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1323)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1324)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1326)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1327)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1465)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1608)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1624)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1625)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1626)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1627)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1652)
- [CNA](https://access.redhat.com/errata/RHSA-2026:1736)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2064)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2072)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2485)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2563)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2633)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2659)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2671)
- [CNA](https://access.redhat.com/errata/RHSA-2026:2974)
- [CNA](https://access.redhat.com/errata/RHSA-2026:3415)
- [CNA](https://access.redhat.com/security/cve/CVE-2025-13601)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2416741)
- [CNA](https://gitlab.gnome.org/GNOME/glib/-/issues/3827)
- [CNA](https://gitlab.gnome.org/GNOME/glib/-/merge_requests/4914)
- [CNA](https://access.redhat.com/errata/RHSA-2026:4419)
- [CNA](https://access.redhat.com/errata/RHSA-2026:7461)
- [CNA](https://access.redhat.com/errata/RHSA-2026:18344)
- [CNA](https://access.redhat.com/errata/RHSA-2026:18705)
- [siemens-SADP](https://cert-portal.siemens.com/productcert/html/ssa-253495.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.32%
- **EPSS Percentile:** 25.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._