CVE-2025-0395

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

In GNU C Library versions 2.13 to 2.40, when the assert() function fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Risk Assessment

The risk includes buffer overflow, which could lead to program crashes or potentially code execution.

Recommendation

It is recommended to upgrade glibc to a version newer than 2.40 that includes a fix for this vulnerability.

Original NVD description (English source)

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.