CVE-2025-60019

glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location.

CVSS 3.1

3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

0.4% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-25)

CWE

CWE-476

Published

2025-09-25

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

References

• https://access.redhat.com/security/cve/CVE-2025-60019
• https://bugzilla.redhat.com/show_bug.cgi?id=2398140
• https://gitlab.gnome.org/GNOME/glib-networking/-/issues/227

Check your stackJSON