CVE-2025-32990 Gnutls: vulnerability in gnutls certtool template parsing
A heap-buffer-overflow in GnuTLS certtool allows attackers to cause memory corruption and system crashes via malicious template files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-32990?
CVE-2025-32990 is a medium-severity memory corruption vulnerability in Gnu Gnutls, published on 10 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.
Weakness: CWE-122
Which versions are affected by CVE-2025-32990?
It affects 3 products.
Linux distribution packages (2)
gnutls SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 3.3.27-3.12.1 |
gnutls SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 3.4.17-8.20.1 |
Products include Gnu Gnutls, Redhat Enterprise Linux, Redhat Openshift Container Platform.
How do I fix CVE-2025-32990?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-32990 being exploited?
There is no known exploitation of CVE-2025-32990 in the wild and no public exploit code.
Other vulnerabilities in Gnu Gnutls
Sources
Also known as ALPINE-CVE-2025-32990, AZL-65091, AZL-65100, BELL-CVE-2025-32990, CLSA-2025-1757949650, CLSA-2025-1758022425 and 11 more.