Is CVE-2025-6052 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-6052 being exploited in the wild.

How severe is CVE-2025-6052?

Low severity, with a CVSS score of 3.7, published 13 June 2025.

Which products and versions are affected?

Gnome Glib 2.75.3 up to 2.84.3; Siemens RUGGEDCOM RST2428P All versions < V4.0; Siemens SIMATIC CN 4100 All versions < V5.0.

Is there a fix for CVE-2025-6052?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-6052 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2025-6052?

Check whether you run Gnome Glib, Siemens RUGGEDCOM RST2428P or Siemens SIMATIC CN 4100 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-6052: GNOME GLib integer overflow in g_string_maybe_expand

Q: Is there a fix for CVE-2025-6052?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2025-6052 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2025-6052?

Check whether you run Gnome Glib, Siemens RUGGEDCOM RST2428P or Siemens SIMATIC CN 4100 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-6052 · Severity: low · CVSS 3.7 · Published 2025-06-13

GLib, a fundamental software library used by many Linux applications and Siemens industrial devices, contains a memory management flaw. An attacker could potentially cause a system crash or memory corruption by providing extremely large amounts of data to an application that uses this library. While difficult to exploit in practice due to the massive amount of memory required, it poses a risk to service availability and system stability.

Technologies: Gnome Glib, Siemens RUGGEDCOM RST2428P, Siemens SIMATIC CN 4100. Vendors: Gnome, Siemens.

Quick answers

Is CVE-2025-6052 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-6052 being exploited in the wild.
How severe is CVE-2025-6052?: Low severity, with a CVSS score of 3.7, published 13 June 2025.
Which products and versions are affected?: Gnome Glib 2.75.3 up to 2.84.3; Siemens RUGGEDCOM RST2428P All versions < V4.0; Siemens SIMATIC CN 4100 All versions < V5.0.
Is there a fix for CVE-2025-6052?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-6052 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2025-6052?: Check whether you run Gnome Glib, Siemens RUGGEDCOM RST2428P or Siemens SIMATIC CN 4100 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An integer overflow vulnerability exists in the g_string_maybe_expand() function of the GLib library. When an application appends data to an already extremely large GString, an internal size calculation can wrap around (integer overflow), leading the library to incorrectly assume sufficient buffer space exists. This results in a heap-based buffer overflow when the data is written. While the vulnerability requires specific conditions involving very large memory allocations, it can be triggered remotely if an application accepts untrusted input and processes it using GString. The issue is fixed in GLib versions 2.84.3 and 2.85.1.

Affected products

GNOME GLib 2.75.3 up to 2.84.3
Siemens SIMATIC CN 4100 All versions < V5.0
Siemens RUGGEDCOM RST2428P All versions < V4.0

Timeline

2025-06-13: disclosed: Initial disclosure by Red Hat
2025-06-13: advisory: NVD published date
2026-05-12: advisory: Siemens published advisory SSA-032379 for SIMATIC CN 4100
2026-06-02: advisory: Siemens published advisory SSA-253495 for SINEC OS / RUGGEDCOM RST2428P

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.