CVE-2025-0395

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-131

Affected software

Vendor	Product	Versions
The GNU C Library	glibc	>= 2.13, <= 2.40
Siemens	RUGGEDCOM ROX MX5000	< V2.17.1
Siemens	RUGGEDCOM ROX MX5000RE	< V2.17.1
Siemens	RUGGEDCOM ROX RX1400	< V2.17.1
Siemens	RUGGEDCOM ROX RX1500	< V2.17.1
Siemens	RUGGEDCOM ROX RX1501	< V2.17.1
Siemens	RUGGEDCOM ROX RX1510	< V2.17.1
Siemens	RUGGEDCOM ROX RX1511	< V2.17.1
Siemens	RUGGEDCOM ROX RX1512	< V2.17.1
Siemens	RUGGEDCOM ROX RX1524	< V2.17.1
Siemens	RUGGEDCOM ROX RX1536	< V2.17.1
Siemens	RUGGEDCOM ROX RX5000	< V2.17.1
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	>= V3.1.0, < V3.1.5
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	>= V3.1.0, < V3.1.5

References

Timeline

Published: Jan 22, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-03967.8A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcce CVE-2025-03973.5A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/adm CVE-2025-03982.4A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown function CVE-2025-03997.2A vulnerability was found in StarSea99 starsea-mall 1.0. It has been declared as critical. This vulnerability affects the function UploadCon CVE-2025-04005.4A vulnerability was found in StarSea99 starsea-mall 1.0. It has been rated as problematic. This issue affects some unknown processing of the CVE-2025-04015.3A vulnerability classified as critical has been found in 1902756969 reggie 1.0. Affected is the function download of the file src/main/java/CVE-2025-04028.8A vulnerability classified as critical was found in 1902756969 reggie 1.0. Affected by this vulnerability is the function upload of the file CVE-2025-04035.3A vulnerability, which was classified as problematic, has been found in 1902756969 reggie 1.0. Affected by this issue is some unknown functi CVE-2025-04046.3A vulnerability has been found in liujianview gymxmjpa 1.0 and classified as critical. This vulnerability affects the function CoachControll CVE-2025-04058.8A vulnerability was found in liujianview gymxmjpa 1.0 and classified as critical. This issue affects the function GoodsDaoImpl of the file s CVE-2025-04068.8A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the fi CVE-2025-04078.8A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function Equi