CVE-2025-0395

MEDIUM

GNU C Library <2.41 - Buffer Overflow

Title source: llm
STIX 2.1

Description

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

References (12)

Core 12
Core References

Scores

CVSS v3 6.2
EPSS 0.0034
EPSS Percentile 25.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-131
Status published
Products (1)
The GNU C Library/glibc 2.13 - 2.40
Published Jan 22, 2025
Tracked Since Feb 18, 2026