CVE-2025-13601 : A heap-based buffer overflow Vulnerability in Aria Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

A heap-based buffer overflow vulnerability, registered as CVE‑2025‑13601, has been identified in the glib library in VMware Aria Operations for Networks.
This security concern can allow an attacker to exploit the g_escape_uri_string() function to cause memory corruption, potentially leading to application instability or unexpected application downtime.
This article clarifies whether VMware Aria Operations for Networks is affected by CVE‑2025‑13601.

Environment

Aria Operations for Networks 

Resolution

Aria Operations for Networks is not affected by CVE-2025-13601.

Broadcom is aware of CVE-2025-13601.
Refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.
Should you require further information or support, Contact Broadcom Support