CVE-2025-0395 - CVE House
Back to Database
Status published Unknown CVE-2025-0395

When the assert() function in the GNU C Library versions...

Vulnerability Description

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0395

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Qualys Security Advisory

References

More from The GNU C Library

View All →
CVE-2025-8058
The regcomp function in the GNU C library version from...
Medium 5.9
CVE-2025-5745
The strncmp implementation optimized for the Power10 processor in the...
Unknown 0
CVE-2025-5702
The strcmp implementation optimized for the Power10 processor in the...
Unknown 0
CVE-2025-4802
Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library...
Unknown 0
CVE-2025-15281
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
Unknown 0

Affected Vendor

The GNU C Library

View all reports →

Affected Software

glibc
Vulnerable Versions:
2.13

Timeline

Official Publish: January 22nd, 2025
Last Modified: May 12th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-131

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.