CVEvulnerability

CVE-2025-5278

4.4 MEDIUM Published 2025-05-27 Modified 2026-10-14 Official page ↗
Status
Deferred
Published
2025-05-27
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Weaknesses
CWE-121

Description

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Related

Weakness · CWE (1)

  • CWE-121 Stack-based Buffer Overflow weakness

References