GitHub Advisoryadvisory · PyPI

GHSA-5m5w-w2h2-fqgq SPDK is vulnerable to buffer overflow in the NVMe-oF target component

MEDIUM Published 2025-10-01 Modified 2025-10-01 Official page ↗

Aliases: CVE-2025-57275
Ecosystem: PyPI
Packages: spdk
Severity: Moderate
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Weaknesses: CWE-119, CWE-120
Reviewed: 2025-10-01

Affected packages

• PyPI spdk: < 25.9 → fixed in 25.9

Description

Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf.

Related

Alias · CVE (1)

CVE-2025-57275 Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf. vulnerability

Weakness · CWE (2)

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
CWE-120 Buffer Copy without Checking Size of Input weakness

References