CVE-2025-32386CWE-770CWE-789

Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination

Medium · published April 9, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
38.7
In the wild
Unconfirmed
What it is

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed (e.g., >800x difference). When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issue has been resolved in Helm v3.17.3.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00457 · 38.7th percentile
Weaknesses
CWE-770 · Allocation of Resources Without Limits or Throttling; CWE-789 · Memory Allocation with Excessive Size Value
Published
2025-04-09T22:28Z
EPSS history
Timeline
  • 09 APR 22:28Z
    Helm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination
    cvelistv5