CVE-2025-29478

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Apr 7, 2025
Last modified
Jun 17, 2026
NVD status
Undergoing Analysis

Related CVEs from 2025

CVE-2025-294805.5Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release functCVE-2025-294816.2Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of lCVE-2025-294826.2Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) proceCVE-2025-294836.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.CVE-2025-294847.5An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allCVE-2025-294856.5libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allows attackers to causeCVE-2025-294866.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function.CVE-2025-294877.5An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allCVE-2025-294886.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function.CVE-2025-294896.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function.CVE-2025-294906.5libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function. This vulnerability allows attackers to cCVE-2025-294916.5An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (D
CVE-2025-29478: Medium severity, CVSS 5.5 | Vulnix