CVE-2025-6966

MediumCVSS 5.5/10Last modified Sep 25, 2026

Description

NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Canonical	python-apt	>= 3.0, < 3.0.0ubuntu1.1; >= 3.0, < 3.0.0ubuntu0.25.04.1; >= 2.7, < 2.7.7ubuntu5.1; >= 2.4, < 2.4.0ubuntu4.1; >= 2.0, < 2.0.1ubuntu0.20.04.1+esm1; >= 1.6, < 1.6.6ubuntu0.1~esm1; >= 1.1, < 1.1.0~beta1ubuntu0.16.04.12+esm1; < 0.9.3.5ubuntu3+esm5

References

https://bugs.launchpad.net/ubuntu/+source/python-apt/+bug/2091865Exploit, Issue Tracking, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/12/msg00019.htmlMailing List, Third Party Advisory

Timeline

Published: Dec 5, 2025
Last modified: Sep 25, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-696628.6SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function be CVE-2025-69678.7Execution After Redirect (EAR) vulnerability in Sarman Soft Software and Technology Services Industry and Trade Ltd. Co. CMS allows JSON Hij CVE-2025-696746.4Buffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7_P161006 (Build.0333.250211) allows an attacker to execute arbitrary code via the CVE-2025-696898.8The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-su CVE-2025-69695.5in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.CVE-2025-696909.1Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the CVE-2025-696919.9Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call CVE-2025-696935.4Out-of-bounds read in FFmpeg 8.0 and 8.0.1 RV60 video decoder (libavcodec/rv60dec.c). The quantization parameter (qp) validation at line 226 CVE-2025-69707.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’CVE-2025-697007.5Tenda FH1203 V2.0.1.6 contains a stack-based buffer overflow vulnerability in the modify_add_client_prio function, which is reachable via th CVE-2025-69717.8Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. Thi CVE-2025-69727.8Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. Thi