CVE-2025-71436 Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2025-71436?
CVE-2025-71436 is a high-severity vulnerability in librdf Raptor RDF Syntax Library, published on 20 Oct 2026.
Official description
Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.
Weakness: CWE-122
Which versions are affected by CVE-2025-71436?
How do I fix CVE-2025-71436?
Upgrade to a fixed version.
Is CVE-2025-71436 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-71436 exists.
Sources
Also known as BELL-CVE-2025-71436, DEBIAN-CVE-2025-71436, ECHO-2a02-d472-965f, GHSA-m7mm-cj97-2wxq.