GNU vulnerabilities
139 CVEs and advisories name GNU as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-7546GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write
- CVE-2025-7545GNU Binutils objcopy.c copy_section heap-based overflow
- CVE-2025-45582GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process.
- CVE-2025-6141GNU ncurses parse_entry.c postprocess_termcap stack-based overflow
- CVE-2025-5899GNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap
- CVE-2025-5898GNU PSPP pspp-convert.c parse_variables_option out-of-bounds write
- CVE-2025-5245GNU Binutils objdump debug.c debug_type_samep memory corruption
- CVE-2025-5244GNU Binutils ld elflink.c elf_gc_sweep memory corruption
- CVE-2025-5001GNU PSPP pspp-convert.c calloc integer overflow
- CVE-2025-48188libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt fun
- CVE-2025-47816libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related t
- CVE-2025-47815libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_
- CVE-2025-47814libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_
- CVE-2025-47229libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and applicatio
- CVE-2025-43921GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.
- CVE-2025-43920GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute
- CVE-2025-43919GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at
- CVE-2025-3198GNU Binutils objdump bucomm.c display_info memory leak
- CVE-2025-1377GNU elfutils eu-strip strip.c gelf_getsymshndx denial of service
- CVE-2025-1376GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
- CVE-2025-1372GNU elfutils eu-readelf readelf.c print_string_section buffer overflow
- CVE-2025-1371GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference
- CVE-2025-1365GNU elfutils eu-readelf readelf.c process_symtab buffer overflow
- CVE-2025-1352GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
- CVE-2025-1182GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption
- CVE-2025-1181GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption
- CVE-2025-1180GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption
- CVE-2025-1179GNU Binutils ld libbfd.c bfd_putl64 memory corruption
- CVE-2025-1178GNU Binutils ld libbfd.c bfd_putl64 memory corruption
- CVE-2025-1176GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow