Executive brief
A security flaw exists in GLib, a fundamental software library used by many Linux-based applications and systems to handle basic tasks like file management. An error in how the library creates temporary files could allow an attacker to manipulate file paths or access private data they should not be able to see. This could lead to unauthorized data access or system instability in environments that rely on this library, such as Siemens industrial networking equipment.
Technical details
An integer overflow vulnerability exists in GLib's `get_tmp_file()` function within `glib/gfileutils.c`. The flaw is caused by insufficient validation of file path lengths during the creation of temporary directories or files. This overflow leads to an out-of-bounds memory access (specifically a buffer under-read), which can be exploited to perform path traversal or access the private content of temporary files by tricking the application into following malicious symbolic links. While the attack vector is listed as network-based in some metrics, it typically requires specific conditions where an application processes untrusted path-related input. Siemens has confirmed impact on SINEC OS-based devices like the RUGGEDCOM RST2428P and recommends upgrading to SINEC OS V4.0.
Affected products
- GNOME glib through 2.82.x
- Siemens SINEC OS before V4.0
- Siemens RUGGEDCOM RST2428P before V4.0
Timeline
- 2025-09-01: disclosed: Initial report in Red Hat Bugzilla
- 2025-09-03: advisory: NVD publication date
- 2026-06-02: patched: Siemens released SINEC OS V4.0 to address the issue in affected industrial products