CVE-2025-29481

MediumCVSS 6.2/10Last modified Jun 17, 2026

Description

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. This has been disputed by third parties who assert that "no one in their sane mind should be passing untrusted ELF files into libbpf while running under root."

Metrics

CVSS 3.1 6.2/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Apr 7, 2025
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-294826.2Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) proceCVE-2025-294836.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.CVE-2025-294847.5An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allCVE-2025-294856.5libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allows attackers to causeCVE-2025-294866.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function.CVE-2025-294877.5An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allCVE-2025-294886.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function.CVE-2025-294896.5libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function.CVE-2025-294906.5libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function. This vulnerability allows attackers to cCVE-2025-294916.5An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (DCVE-2025-294926.5libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function.CVE-2025-294936.5libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETPROPERTY function. This vulnerability allows attackers to
CVE-2025-29481: Medium severity, CVSS 6.2 | Vulnix