CVE-2025-0395: Buffer overflow in the GNU C Library's assert()
Last updated 10 February 2025
Other sources
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0395?
CVE-2025-0395 has a high severity rating due to the potential for a buffer overflow that can lead to system compromise.
How do I fix CVE-2025-0395?
To fix CVE-2025-0395, upgrade to GNU C Library version 2.40-6 or later.
Which versions of GNU C Library are affected by CVE-2025-0395?
CVE-2025-0395 affects GNU C Library versions between 2.13 and 2.40.
What could be the impact of CVE-2025-0395 on my system?
The impact of CVE-2025-0395 may include application crashes or arbitrary code execution due to the buffer overflow.
Is CVE-2025-0395 a critical vulnerability?
Yes, CVE-2025-0395 is considered critical due to its ability to affect system stability and security.