CVE-2025-11374: 
Consul vulnerability analysis and mitigation

CVE-2025-4373 is a buffer underflow vulnerability discovered in GLib's gstringinsert_unichar() function. The vulnerability was disclosed on May 6, 2025, affecting GLib, which provides core application building blocks for libraries and applications written in C. When the position at which to insert a character is large, the position will overflow, leading to a buffer underwrite (NVD).

The vulnerability is classified as CWE-124 (Buffer Underwrite) and has been assigned a CVSS v3.1 base score of 4.8 (Medium) with the vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L. The issue specifically occurs in the gstringinsert_unichar() function when handling large position values for character insertion, which can result in an integer overflow leading to a buffer underwrite condition (NVD).

The vulnerability can lead to buffer underwrite conditions, potentially affecting system stability and security. According to the CVSS scoring, the vulnerability has low impact on both integrity and availability, with no direct impact on confidentiality (NVD).

Red Hat has released security updates to address this vulnerability in GLib2 packages. The fix is available in version 2.68.4-14.el9_4.3 for various Red Hat Enterprise Linux platforms. Users are advised to update to the patched version (Red Hat).