Skip to content
fr Sign in
6.2 Medium

CVE-2025-0395 When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the…

Description

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Affected products and versions

Product Affected versions Fixed in
glibc 2.13 2.13 → 2.40 No fix stated
RUGGEDCOM ROX MX5000 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX MX5000RE 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX1400 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX1500 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX1501 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX1510 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX1511 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX1512 2.17 earliest → < 2.17.1 2.17.1
Show the 6 other branches
Product Affected versions Fixed in
RUGGEDCOM ROX RX1524 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX1536 2.17 earliest → < 2.17.1 2.17.1
RUGGEDCOM ROX RX5000 2.17 earliest → < 2.17.1 2.17.1
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of glibc

The 35 CVEs of glibc →
CVE-2026-122054 BIG-HKSCS decoding hang on crafted input 5.9 Medium CVE-2026-84243 The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable… 7.0 High CVE-2026-97399 The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte… 3.7 Low CVE-2026-95818 A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44… 3.6 Low
Track this CVE