CVE-2025-0395CWE-131

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and…

Medium · published January 22, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Weakness
CWE-131 · Incorrect Calculation of Buffer Size
Published
2025-01-22T13:11Z
EPSS history
Timeline
  • 22 JAN 13:11Z
    When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and…
    cvelistv5