CVE-2025-0395

Summary

CVE	CVE-2025-0395
State	PUBLISHED
Assigner	glibc
Source Priority	CVE Program / NVD first with legacy fallback
Published	2025-01-22 13:15:20 UTC
Updated	2026-05-12 13:16:27 UTC
Description	When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Primary CVSS: v3.1 6.2 MEDIUM from ADP

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.000710000 probability, percentile 0.215720000 (date 2026-05-12)

Problem Types: CWE-131 | CWE-131 CWE-131 Incorrect Calculation of Buffer Size

Version	Source	Type	Score	Severity	Vector
3.1	ADP	DECLARED	6.2	MEDIUM	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	6.2	MEDIUM	`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source	Vendor	Product	Version	Platforms
CNA	The GNU C Library	Glibc	affected 2.13 2.40 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX MX5000	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX MX5000RE	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1400	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1500	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1501	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1510	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1511	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1512	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1524	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX1536	affected V2.17.1 custom	Not specified
ADP	Siemens	RUGGEDCOM ROX RX5000	affected V2.17.1 custom	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified

Reference	Source	Link	Tags
sourceware.org/pipermail/libc-announce/2025/000044.html	3ff69d7a-14f2-4f67-a097-88dee7810d18	sourceware.org
cert-portal.siemens.com/productcert/html/ssa-398330.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
www.openwall.com/lists/oss-security/2025/04/13/1	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com
www.openwall.com/lists/oss-security/2025/01/23/2	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com
security.netapp.com/advisory/ntap-20250228-0006	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com
sourceware.org/git	3ff69d7a-14f2-4f67-a097-88dee7810d18	sourceware.org
cert-portal.siemens.com/productcert/html/ssa-577017.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
sourceware.org/bugzilla/show_bug.cgi	3ff69d7a-14f2-4f67-a097-88dee7810d18	sourceware.org
www.openwall.com/lists/oss-security/2025/01/22/4	3ff69d7a-14f2-4f67-a097-88dee7810d18	www.openwall.com
www.openwall.com/lists/oss-security/2025/04/24/7	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com
www.openwall.com/lists/oss-security/2025/01/22/4	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com
lists.debian.org/debian-lts-announce/2025/04/msg00039.html	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

CNA: Qualys Security Advisory (en)

There are currently no legacy QID mappings associated with this CVE.