CVE-2025-4802CWE-426

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared…

High · published May 16, 2025

CVSS v3.1
7.8
EPSS
1%
Percentile
47.7
In the wild
Unconfirmed
What it is

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in statically compiled setuid binaries that call dlopen (including internal dlopen calls after setlocale or calls to NSS functions such as getaddrinfo).

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00593 · 47.7th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2025-05-16T19:32Z
EPSS history
Timeline
  • 16 MAY 19:32Z
    Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared…
    cvelistv5