CVE-2025-0395 Memory corruption in glibc
A buffer overflow in glibc's assert() function can lead to code execution or denial of service when assertion messages align with page boundaries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-0395?
CVE-2025-0395 is a medium-severity memory corruption vulnerability in The GNU C Library glibc, published on 22 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.
Weakness: CWE-131
Which versions are affected by CVE-2025-0395?
Linux distribution packages (40)
compat-libpthread-nonshared AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-all-langpacks AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-benchtests AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-common AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-devel AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-doc AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-gconv-extra AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-headers AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-aa AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-af AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-agr AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-ak AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-am AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-an AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-anp AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-ar AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-as AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-ast AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-ayc AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-az AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-be AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bem AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-ber AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bg AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bhb AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bho AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bi AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bn AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bo AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-br AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-brx AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-bs AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-byn AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-ca AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-ce AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-chr AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-cmn AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-crh AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
glibc-langpack-cs AlmaLinux:8 | All versions | 2.28-251.el8_10.16 |
How do I fix CVE-2025-0395?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-0395 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-0395 exists.
Sources
Also known as ALSA-2025:3828, ALSA-2025:4244, AZL-55937, AZL-55965, BELL-CVE-2025-0395, CLSA-2025-1740230107 and 31 more.