CVE-2025-8058 - CVE House

Back to Database

Status published Medium CVE-2025-8058

The regcomp function in the GNU C library version from...

5.9 CVSS

Vulnerability Description

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8058

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from The GNU C Library

View All →

The strncmp implementation optimized for the Power10 processor in the...

The strcmp implementation optimized for the Power10 processor in the...

Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library...

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

When the assert() function in the GNU C Library versions...

Affected Vendor

The GNU C Library

View all reports →

Affected Software

glibc

Vulnerable Versions:

2.4

Timeline

Official Publish: July 23rd, 2025

Last Modified: November 4th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1190 Exploit Public-Facing Application

T1574 Hijack Execution Flow

Privilege Escalation

T1059 Command and Scripting Interpreter

T1485 Data Destruction