CVE-2025-0838
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-0838
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-0838.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-0838
- Related
- Published
- 2025-02-21T15:15:11Z
- Modified
- 2025-02-26T07:26:44.814201Z
- Summary
- [none]
- Details
-
There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1
- References
Affected packages
Debian:11 / abseil
Package
- Name
- abseil
- Purl
- pkg:deb/debian/abseil?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
0~20200923.*
0~20200923.3-2
0~20200923.3-3
0~20210324.*
0~20210324.2-1
0~20210324.2-2
0~20210324.2-3
0~20210324.2-4
0~20220623.*
0~20220623.0-1
0~20220623.0-2
20220623.*
20220623.1-1
20220623.1-2
20220623.1-3
20220623.1-3.1
20230125.*
20230125.3-1
20230125.3-2
20230802.*
20230802.0-1
20230802.1-1
20230802.1-2
20230802.1-3
20230802.1-4
20240116.*
20240116.2-1
20240116.2-2
20240722.*
20240722.0-1
20240722.0-1+hurd.1
Debian:12 / abseil
Package
- Name
- abseil
- Purl
- pkg:deb/debian/abseil?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Debian:13 / abseil
Package
- Name
- abseil
- Purl
- pkg:deb/debian/abseil?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected