CVE-2025-4373
CVE-2025-4373: 2 tracked advisory records across NetApp, Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
NetApp
1 advisory- Advisory severityMedium4.8
Medium [CVE-2025-4373] Glib Vulnerability in NetApp Products
NTAP-20250919-0009Source published Source updated
Multiple NetApp products incorporate glib. Glib versions prior to 2.84.2 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or Denial of Service (DoS). Affected products: AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70, AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50, Active IQ Unified Manager for VMware vSphere, FAS/AFF Baseboard Management Controller (BMC) - A800/C800, FAS/AFF Baseboard Management Controller (BMC) - A900/9500, FAS/AFF Baseboard Management Controller (BMC) - C190/A150/A220/FAS2720/FAS2750, FAS/AFF Baseboard Management Controller (BMC) - FAS2820. NetApp reports that one or more additional products remain under investigation; review the canonical…
- Affected products in this advisory
- AFF/ASA/FAS Baseboard Management Controller (BMC) - A1K/A90/A70/C80/FAS90/FAS70
- AFF/ASA/FAS Baseboard Management Controller (BMC) - A50/A30/A20/C60/C30/FAS50
- Active IQ Unified Manager for VMware vSphere
- FAS/AFF Baseboard Management Controller (BMC) - A800/C800
3 more entries in the full advisory.
- Source-reported affected versions
- 2.84.2
- Source-reported fixed versions
- Active IQ Unified Manager for VMware vSphere: 9.16
- Mitigation guidance
- Update affected NetApp products to a fixed release: Active IQ Unified Manager for VMware vSphere: 9.16.
Red Hat
1 advisory- Advisory severityMedium4.8
Medium [CVE-2025-4373] buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
CVE-2025-4373Source published Source updated
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. Red Hat severity: Moderate — CVSS 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L). Weakness: CWE-124. Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.6 Telecommunications Update Service; Red Hat Enterprise Linux 8.6 Update Services…
- Affected products in this advisory
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8.2 Advanced Update Support
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
18 more entries in the full advisory.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- glib2-0:2.80.4-4.el10_0.6
- glib2-0:2.56.4-166.el8_10
- glib2-0:2.56.4-8.el8_2.2
- glib2-0:2.56.4-10.el8_4.2
28 more entries in the full advisory.
- Mitigation guidance
- Currently, no mitigation is available for this vulnerability.
Android app · Google Play
Turn CVE research into alerts on your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.