CVE-2025-8058

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-8058
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-8058.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-8058
Downstream
Related
Published
2025-07-23T19:57:17.138Z
Modified
2026-06-18T03:56:36.686310469Z
Severity
  • 5.9 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H CVSS Calculator
Summary
[none]
Details

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.

Database specific 
{
    "cna_assigner": "glibc",
    "cwe_ids": [
        "CWE-415"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8058.json"
}
References

Affected packages

Git / sourceware.org/git/glibc.git

Affected ranges

Type
GIT
Repo
https://sourceware.org/git/glibc.git
Events
Introduced
3858bf28a66f449cc2d815122032a60cf9bf793e
Fixed
d2097651cc57834dbfcaa102ddfacae0d86cfb66
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "2.4"
        },
        {
            "fixed": "2.42"
        }
    ]
}

Affected versions

Other
changelog-ends-here
cvs/fedora-glibc-20060306T1239
cvs/fedora-glibc-20060328T0900
cvs/fedora-glibc-20060424T0820
cvs/fedora-glibc-20060424T2027
cvs/fedora-glibc-20060425T0903
cvs/fedora-glibc-20060426T2000
cvs/fedora-glibc-20060427T2122
cvs/fedora-glibc-20060501T0751
cvs/fedora-glibc-20060505T0554
cvs/fedora-glibc-20060505T1443
cvs/fedora-glibc-20060511T1325
cvs/fedora-glibc-20060519T1550
cvs/fedora-glibc-20060521T2153
cvs/fedora-glibc-20060524T0721
cvs/fedora-glibc-20060531T1322
cvs/fedora-glibc-20060630T0858
cvs/fedora-glibc-20060710T2206
cvs/fedora-glibc-20060729T2255
cvs/fedora-glibc-20060731T0706
cvs/fedora-glibc-20060802T1650
cvs/fedora-glibc-20060802T1808
cvs/fedora-glibc-20060807T1859
cvs/fedora-glibc-20060810T0627
cvs/fedora-glibc-20060815T0533
cvs/fedora-glibc-20060815T2033
cvs/fedora-glibc-20060822T0706
cvs/fedora-glibc-20060825T0639
cvs/fedora-glibc-20060828T1903
cvs/fedora-glibc-20060831T0640
cvs/fedora-glibc-20060831T1812
cvs/fedora-glibc-20060905T0633
cvs/fedora-glibc-20060907T0853
cvs/fedora-glibc-20060910T1832
cvs/fedora-glibc-20060915T0943
cvs/fedora-glibc-20060919T1816
cvs/fedora-glibc-20060919T1847
cvs/fedora-glibc-20060923T0946
cvs/fedora-glibc-20060925T1535
cvs/fedora-glibc-20060929T2037
cvs/fedora-glibc-20061002T1858
cvs/fedora-glibc-20061025T1857
cvs/fedora-glibc-20061027T1902
cvs/fedora-glibc-20061029T2155
cvs/fedora-glibc-20061103T1610
cvs/fedora-glibc-20061109T1949
cvs/fedora-glibc-20061109T2048
cvs/fedora-glibc-20061110T1956
cvs/fedora-glibc-20061110T2049
cvs/fedora-glibc-20061120T1000
cvs/fedora-glibc-20061128T1037
cvs/fedora-glibc-20061130T1652
cvs/fedora-glibc-20061201T0821
cvs/fedora-glibc-20061205T2141
cvs/fedora-glibc-20061210T1006
cvs/fedora-glibc-20061214T0850
cvs/fedora-glibc-20061219T1804
cvs/fedora-glibc-20070117T0857
cvs/fedora-glibc-20070117T1043
cvs/fedora-glibc-20070202T0923
cvs/fedora-glibc-20070211T1607
cvs/fedora-glibc-20070221T1011
cvs/fedora-glibc-20070317T2130
cvs/fedora-glibc-20070331T1609
cvs/fedora-glibc-20070416T2350
cvs/fedora-glibc-20070504T0917
cvs/fedora-glibc-20070510T0634
cvs/fedora-glibc-20070510T2304
cvs/fedora-glibc-20070510T2308
cvs/fedora-glibc-20070515T2025
cvs/fedora-glibc-20070731T1624
cvs/fedora-glibc-20070801T1703
cvs/fedora-glibc-20070804T2027
cvs/fedora-glibc-20070809T0939
cvs/fedora-glibc-20070810T2152
cvs/fedora-glibc-20070814T0643
cvs/fedora-glibc-20070814T0725
cvs/fedora-glibc-20070815T2049
cvs/fedora-glibc-20070816T2121
cvs/fedora-glibc-20070825T1839
cvs/fedora-glibc-20070827T2032
cvs/fedora-glibc-20070918T1931
cvs/fedora-glibc-20070920T0007
cvs/fedora-glibc-20070929T1859
cvs/fedora-glibc-20071003T1908
cvs/fedora-glibc-20071010T2047
cvs/fedora-glibc-20071011T1636
cvs/fedora-glibc-20071014T1847
cvs/fedora-glibc-20071014T2102
cvs/fedora-glibc-20071015T0728
cvs/fedora-glibc-20071017T2007
cvs/fedora-glibc-20071017T2029
cvs/fedora-glibc-20071212T1051
cvs/fedora-glibc-20071212T1953
cvs/fedora-glibc-20071227T0908
cvs/fedora-glibc-20080103T1958
cvs/fedora-glibc-20080111T0737
cvs/fedora-glibc-20080131T0821
cvs/fedora-glibc-20080201T1017
cvs/fedora-glibc-20080216T1726
cvs/fedora-glibc-20080305T0857
cvs/fedora-glibc-20080310T1651
cvs/fedora-glibc-20080314T1732
cvs/fedora-glibc-20080314T2159
cvs/fedora-glibc-20080326T1041
cvs/fedora-glibc-20080328T1347
cvs/fedora-glibc-20080408T0706
cvs/fedora-glibc-20080410T1907
cvs/fedora-glibc-20080411T1934
cvs/fedora-glibc-20080412T0741
cvs/fedora-glibc-20080515T0735
cvs/fedora-glibc-20080516T2152
cvs/fedora-glibc-20080518T1017
cvs/fedora-glibc-20080520T1924
cvs/fedora-glibc-20080524T2218
cvs/fedora-glibc-20080612T1619
cvs/fedora-glibc-20080613T1601
cvs/fedora-glibc-20080703T1203
cvs/fedora-glibc-20080716T0944
cvs/fedora-glibc-20080728T2320
cvs/fedora-glibc-20080802T0809
cvs/fedora-glibc-20080828T1623
cvs/fedora-glibc-20081019T1815
cvs/fedora-glibc-20081028T1533
cvs/fedora-glibc-20081031T2102
cvs/fedora-glibc-20081112T2008
cvs/fedora-glibc-20081113T2206
cvs/fedora-glibc-20090102T0809
cvs/fedora-glibc-20090102T2040
cvs/fedora-glibc-20090102T2110
cvs/fedora-glibc-20090108T0952
cvs/fedora-glibc-20090108T1017
cvs/fedora-glibc-20090204T2135
cvs/fedora-glibc-20090218T1534
cvs/fedora-glibc-20090309T1421
cvs/fedora-glibc-20090310T1925
cvs/fedora-glibc-20090320T1944
cvs/fedora-glibc-20090401T0935
cvs/fedora-glibc-20090407T0545
cvs/fedora-glibc-20090407T0657
cvs/fedora-glibc-20090408T1602
cvs/fedora-glibc-20090409T1422
cvs/fedora-glibc-20090414T2104
cvs/fedora-glibc-20090415T1619
cvs/fedora-glibc-20090416T0610
cvs/fedora-glibc-20090416T1610
cvs/fedora-glibc-20090424T0747
cvs/fedora-glibc-20090424T1908
cvs/fedora-glibc-20090427T1419
cvs/fedora-glibc-20090509T1828
cvs/fedora-glibc-20090509T2200
cvs/fedora-glibc-20090510T1842
cvs/fedora-glibc-2_5-20061008T1253
cvs/fedora-glibc-2_5-20061008T1257
cvs/glibc-2_10
cvs/glibc-2_10-base
cvs/glibc-2_4
cvs/glibc-2_5
cvs/glibc-2_5-base
cvs/glibc-2_6
cvs/glibc-2_6-base
cvs/glibc-2_7
cvs/glibc-2_7-base
cvs/glibc-2_8
cvs/glibc-2_8-base
cvs/glibc-2_9
cvs/glibc-2_9-base
glibc-2.*
glibc-2.10
glibc-2.11
glibc-2.12
glibc-2.13
glibc-2.14
glibc-2.14.9000
glibc-2.15
glibc-2.16
glibc-2.16-ports-merge
glibc-2.16-tps
glibc-2.16.0
glibc-2.16.90
glibc-2.17
glibc-2.17.90
glibc-2.18
glibc-2.18.90
glibc-2.19
glibc-2.19.90
glibc-2.20
glibc-2.20.90
glibc-2.21
glibc-2.21.90
glibc-2.22
glibc-2.22.90
glibc-2.23
glibc-2.23.90
glibc-2.24
glibc-2.24.90
glibc-2.25
glibc-2.25.90
glibc-2.26
glibc-2.26.9000
glibc-2.27
glibc-2.27.9000
glibc-2.28
glibc-2.28.9000
glibc-2.29
glibc-2.29.9000
glibc-2.30
glibc-2.30.9000
glibc-2.31
glibc-2.31.9000
glibc-2.32
glibc-2.32.9000
glibc-2.33
glibc-2.33.9000
glibc-2.34
glibc-2.34.9000
glibc-2.35
glibc-2.35.9000
glibc-2.36
glibc-2.36.9000
glibc-2.37
glibc-2.37.9000
glibc-2.38
glibc-2.38.9000
glibc-2.39
glibc-2.39.9000
glibc-2.4
glibc-2.40
glibc-2.40.9000
glibc-2.41
glibc-2.41.9000
glibc-2.5
glibc-2.6
glibc-2.6.9000
glibc-2.7
glibc-2.8
glibc-2.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-8058.json"