CriticalCVE-2025-6965

    coreutils: Numeric Truncation Error (CVE-2025-6965)

    Published Last modified Sources: BSI

    What is affected, what to do

    A memory corruption flaw was found in SQLite. Under specific conditions a query can be generated where the number of aggregate terms could exceed the number of columns available.

    Update SQLite to version 3.50.2.

    Affected
    • SQLite lt *..3.50.2
    Fixed in
    • SQLite 3.50.2

    Not sure whether and how you are affected? Ask a question about this vulnerability

    Metrics

    9.8

    Priority

    XIEM Effective CVSS: highest available CVSS rating from NVD and vendor data.

    Source: Vendor (CNA), CVSS v3

    7.7

    CVSS v3

    Severity High on the scale from 0 to 10.

    Source: BSI

    73.5 %

    EPSS score

    High — model estimates ≥ 50% chance of real-world exploitation within 30 days.

    Source: FIRST EPSS, percentile 99.47

    Show all metrics
    Severity
    Critical
    Priority (0–325)

    The priority score is a consolidated metric that condenses several individual signals into a single, action-guiding ranking: technical severity (CVSS), exploitation likelihood (EPSS), known-exploited status (KEV) and the context of the affected asset. The aim is to answer the only truly important question in vulnerability management: what first?

    Read in glossary
    66.14 Methodology
    Exploit maturity

    An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack.

    Read in glossary
    no public PoC known
    XIEM Effective CVSS

    XIEM® is the tiered managed-security operating model from NEOSEC and a registered trademark of NEOSEC GmbH. It extends classic SIEM — the central collection, normalisation and correlation of security-relevant events — with endpoint forensics, network visibility and deception technology, and consolidates them into three building tiers: Sentry, Orchestrate and Command.

    Read in glossary
    9.8 Methodology
    CVSS v3

    CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions.

    Read in glossary
    7.7
    CVSS v4

    CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions.

    Read in glossary
    7.2
    EPSS score

    The EPSS score is the absolute model output for an individual vulnerability: the estimated probability of real-world exploitation within the next 30 days, expressed as a value between 0 and 1 (i.e. 0 % to 100 %). A score of 0.42 means „the model estimates a 42 % chance of real-world exploitation within 30 days“.

    Read in glossary
    73.5 %
    High — model estimates ≥ 50% chance of real-world exploitation within 30 days.
    EPSS percentile

    The EPSS percentile is the relative position of a vulnerability within all EPSS-scored CVEs, expressed as a value between 0 and 1. A percentile of 0.90 means „this CVE has a higher EPSS score than 90 % of all other scored CVEs“. Unlike the EPSS score, it is not a probability — but a positioning within a ranking.

    Read in glossary
    99.47
    Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
    KEV status

    The KEV catalogue is a list maintained by the US authority CISA of vulnerabilities for which active exploitation in the wild has been confirmed. It answers not the question „how severe?“ but „is it already being attacked?“ — thereby sharply prioritising patching.

    Read in glossary
    —
    Published
    CISA assessment (SSVC)
    Exploitation: proof of concept · not automatable · Technical impact: total
    Source: CISA Vulnrichment, as of 28 April 2026
    CWE

    CWE is a catalogue of typical weakness types in software and hardware — such as flawed input validation, unsafe memory handling or poor authentication. Where a CVE names a concrete vulnerability in a concrete product, a CWE describes the underlying class of defect.

    Read in glossary
    CWE-197

    Detection rules

    No NEOSEC detection rule is available for this vulnerability yet.

    Classification under NIS2 and CRA

    Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.

    NIS2

    NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management.

    Read in glossary
    High technical severity: assess and remediate the vulnerability in vulnerability handling under Art. 21(2)(e) NIS2 and document the decision.
    CRA

    The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates.

    Read in glossary
    From 11.12.2027, Annex I Part II CRA requires manufacturers of affected products with digital elements to handle vulnerabilities without delay and provide security updates.
    ISO/IEC 27001

    ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security.

    Read in glossary
    Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.

    Description

    A memory corruption flaw was found in SQLite. Under specific conditions a query can be generated where the number of aggregate terms could exceed the number of columns available. This issue could lead to memory corruption and subsequent unintended behavior.

    Source: BSI WID Portal

    Affected products

    The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

    Affected products
    Affected versionsFixed in
    —coreutils
    • 7.2 – < 9.8
    • 9.8
    —libgcrypt
    • < 9.4.0
    • 9.4.0
    —libssh
    • < 0.11.2
    • 0.11.2
    —libxml2
    • < 2.14.4
    • < 2.14.5
    • < 2.15.0
    • 2.14.4
    • 2.14.5
    • 2.15.0
    —linux-pam
    • < 1.7.1
    • 1.7.1
    —PostgreSQL
    • 14 – < 14.18
    • 15 – < 15.13
    • 16 – < 16.9
    • 17 – < 17.5
    • < 13.21
    • 14.18
    • 15.13
    • 16.9
    • 17.5
    • 13.21
    —systemd-coredump
    • 253.0 – < 253.32
    • 254.0 – < 254.25
    • 255.0 – < 255.19
    • 256.0 – < 256.14
    • 257.0 – < 257.6
    • < 252.37
    • 253.32
    • 254.25
    • 255.19
    • 256.14
    • 257.6
    • 252.37
    Apache Software FoundationApache Commons FileUpload
    • 1.0 – < 1.6
    • 2.0.0-M1 – < 2.0.0-M4
    • 1.6
    • 2.0.0-M4
    DellPowerProtect Data Domain
    • —
    • —
    DellPowerProtect Data Domain appliances
    • —
    • —
    DellPowerProtect Data Domain BoostFS
    • —
    • —
    GNOMElibxml2
    • < 2.15.2
    • 2.15.2
    libsshlibssh
    • < 0.11.2
    • 0.11.2
    LinuxLinux
    • 2.6.12 – < 5.4.292
    • 2.6.19 – < 5.4.293
    • 2.6.22 – < 6.6.89
    • 2.6.26 – < 5.4.292
    • 2.6.36 – < 5.10.237
    • 3.1 – < 5.15.190
    • 3.15 – < 5.4.292
    • 3.17 – < 5.4.292
    • 3.18 – < 5.4.292
    • 4.20 – < 5.4.293
    • 4.8 – < 5.4.292
    • 5.11 – < 5.15.180
    • 5.11 – < 5.15.181
    • 5.13 – < 5.15.181
    • 5.15 – < 6.1.134
    • 5.15 – < 6.1.191
    • 5.15 – < 6.6.157
    • 5.16 – < 6.1.132
    • 5.16 – < 6.1.133
    • 5.16 – < 6.1.134
    • 5.16 – < 6.1.136
    • 5.16 – < 6.1.148
    • 5.19 – < 6.1.136
    • 5.4.292
    • 5.4.293
    • 6.6.89
    • 5.4.292
    • 5.10.237
    • 5.15.190
    • 5.4.292
    • 5.4.292
    • 5.4.292
    • 5.4.293
    • 5.4.292
    • 5.15.180
    • 5.15.181
    • 5.15.181
    • 6.1.134
    • 6.1.191
    • 6.6.157
    • 6.1.132
    • 6.1.133
    • 6.1.134
    • 6.1.136
    • 6.1.148
    • 6.1.136
    Distribution and container packages (6)

    Downstream packages (e.g. Bitnami, Debian, Ubuntu, Red Hat). Versions refer to the distribution, not the vendor.

    Distribution and container packages
    Affected versionsFixed in
    bitnamijre
    • 1.9.0
    • —
    bitnamipython-min
    • 3.10.0
    • 3.11.0
    • 3.12.0
    • 3.13.0
    • —
    • —
    • —
    • —
    bitnamisqlite
    • —
    • —
    From bundled advisories, not CVE-specific (140)

    Product list of a bundled advisory that does not state which product this CVE affects.

    Products from bundled advisories
    Affected versionsFixed in
    AmazonCorretto
    • < 11.0.30.7.1
    • < 8.482.08.1
    • 11.0.30.7.1
    • 8.482.08.1
    cPanelcPanel/WHM
    • < 132.0.0
    • 132.0.0
    DellECS
    • 3.8.1.0-3.8.1.7
    • —
    DellNetWorker
    • Virtual Edition
    • < 19.12.0.4
    • < 19.13.0.2
    • —
    • 19.12.0.4
    • 19.13.0.2
    DellNetWorker NRE
    • < 17.0.4
    • < 8.0.28
    • 17.0.4
    • 8.0.28
    DellPowerScale OneFS
    • < 4.0.33
    • 4.0.33
    DellSecure Connect Gateway
    • < 5.34.00.16
    • 5.34.00.16
    DellSecure Connect Gateway Appliance
    • < 5.32.00.18
    • 5.32.00.18
    HitachiVirtual Storage Platform
    • 5100
    • 5100H
    • 5200
    • 5200H
    • 5500
    • 5500H
    • 5600
    • 5600H
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    • —
    IBMAIX
    • 7.2
    • 7.3
    • —
    • —
    IBMApp Connect Enterprise
    • 12.0.1.0-12.0.12.22
    • 13.0.1.0-13.0.6.1
    • < 12.0.16
    • < 12.16.0
    • <LTS 12.0.14
    • —
    • —
    • 12.0.16
    • 12.16.0
    • —
    IBMDataPower Gateway
    • 10.5.0.0-10.5.0.20
    • 10.6.0.0-10.6.0.8
    • 10.6.1.0-10.6.6.0
    • < 10.6.6.0
    • —
    • —
    • —
    • 10.6.6.0
    IBMIntegration Bus
    • for z/OS 10.1.0.0-10.1.0.6
    • —
    IBMMQ
    • Container
    • Operator
    • —
    • —
    IBMPower Hardware Management Console
    • V10
    • V11
    • —
    • —
    IBMQRadar SIEM
    • <7.5.0 UP13
    • <7.5.0 UP14 IF01
    • <7.5.0 UP14 IF03
    • —
    • —
    • —
    IBMSecurity Verify Access
    • < 10.0.9.1
    • 10.0.9.1
    IBMSemeru Runtime
    • 11.0.12.0-11.0.29.0
    • 17.0.0.0-17.0.17.0
    • 21.0.0.0-21.0.9.0
    • 25.0.0.0-25.0.1.0
    • 8.0.302.0-8.0.472.0
    • —
    • —
    • —
    • —
    • —
    IBMSPSS
    • Modeler
    • —
    IBMTivoli Business Service Manager
    • 6.2.0
    • —
    IBMTivoli Monitoring
    • 6.3.0.7
    • —

    Vendors and products

    Affected operating systems

    Affected operating systems
    Linuxdebiandebian_linux11.0
    Linuxdebiandebian_linux8.0
    Linuxdebiandebian_linux12.0
    Linuxredhatenterprise_linux7.0
    Linuxredhatenterprise_linux10.0
    Linuxredhatenterprise_linux8.0
    Linuxredhatenterprise_linux6.0
    Linuxredhatenterprise_linux9.0
    Linuxredhatenterprise_linux_desktop7.0
    Linuxredhatenterprise_linux_desktop6.0
    Linuxredhatenterprise_linux_eus8.4
    Linuxredhatenterprise_linux_eus7.4
    Linuxredhatenterprise_linux_eus10.0
    Linuxredhatenterprise_linux_eus9.4
    Linuxredhatenterprise_linux_eus7.5
    Linuxredhatenterprise_linux_eus8.8
    Linuxredhatenterprise_linux_eus9.6
    Linuxredhatenterprise_linux_eus8.6
    Linuxredhatenterprise_linux_for_arm_6410.0_aarch64
    Linuxredhatenterprise_linux_for_arm_649.0_aarch64
    Linuxredhatenterprise_linux_for_arm_648.0_aarch64
    Linuxredhatenterprise_linux_for_arm_649.4_aarch64
    Linuxredhatenterprise_linux_for_arm_64_eus10.0_aarch64
    Linuxredhatenterprise_linux_for_arm_64_eus9.4_aarch64

    Weakness classes (CWE)

    • CWE-197Numeric Truncation Error

      Base

      Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

      Entry at MITRE CWE-197

    References & sources

    • dell.comsupport/kbdoc/en-us/000450699/dsa-2026-060-security-update-for-…Vendor advisory
    • github.compython/cpython/issues/133767report, Issue tracking
    • github.compython/cpython/pull/129648web, Patch
    • mail.python.orgarchives/list/security-announce@python.org/thread/L75IPBBTSCYEF…advisory, Vendor advisory
    • github.compython/cpython/commit/69b4387f78f413e8c47572a85b3478c47eba8142fix, Patch
    • github.compython/cpython/commit/9f69a58623bd01349a18ba0c7a9cb1dad6a51e8efix, Patch
    • github.compython/cpython/commit/4398b788ffc1f954a2c552da285477d42a571292fix, Patch
    • github.compython/cpython/commit/6279eb8c076d89d3739a6edb393e43c7929b429dfix, Patch
    • github.compython/cpython/commit/73b3040f592436385007918887b7e2132aa8431ffix, Patch
    • github.compython/cpython/commit/8d35fd1b34935221aff23a1ab69a429dd156be77fix, Patch
    • github.compython/cpython/commit/ab9893c40609935e0d40a6d2a7307ea51aec598bfix, Patch
    • openwall.comlists/oss-security/2025/05/16/4
    • openwall.comlists/oss-security/2025/05/19/1
    • bugs.python.orgissue29169report
    • access.redhat.comRHSA-2017:1221Vendor advisory, x_refsource_REDHAT
    • access.redhat.comRHSA-2017:1220Vendor advisory, x_refsource_REDHAT
    • access.redhat.comRHSA-2017:3047Vendor advisory, x_refsource_REDHAT
    • openwall.com[oss-security] 20161205 Re: CVE Request: zlib security issues found during auditMailing list, x_refsource_MLIST
    • securityfocus.com95131Vulnerability database, x_refsource_BID
    • access.redhat.comRHSA-2017:3046Vendor advisory, x_refsource_REDHAT

    Changes to this CVE

    Who changed this CVE and when: NVD (analysis, affected products, CVSS), the CVE publisher (CNA) and additional providers such as CISA (ADP).

    1. Record modifiedgoogle.com

      Show 3 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Referenceadded
      —
      https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
      Referenceremoved
      https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
      —
      Reference typeremoved
      https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8 Types: Patch
      —

      Source identifier: cve-coordination@google.com

    2. Record modifiedCVE Program

      Show 18 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Referenceadded
      —
      http://seclists.org/fulldisclosure/2025/Sep/49
      Referenceadded
      —
      http://seclists.org/fulldisclosure/2025/Sep/53
      Referenceadded
      —
      http://seclists.org/fulldisclosure/2025/Sep/56
      Referenceadded
      —
      http://seclists.org/fulldisclosure/2025/Sep/57
      Referenceadded
      —
      http://seclists.org/fulldisclosure/2025/Sep/58
      Referenceadded
      —
      http://www.openwall.com/lists/oss-security/2025/09/06/1
      Referenceremoved
      http://seclists.org/fulldisclosure/2025/Sep/49
      —
      Referenceremoved
      http://seclists.org/fulldisclosure/2025/Sep/53
      —
      Referenceremoved
      http://seclists.org/fulldisclosure/2025/Sep/56
      —
      Referenceremoved
      http://seclists.org/fulldisclosure/2025/Sep/57
      —
      Referenceremoved
      http://seclists.org/fulldisclosure/2025/Sep/58
      —
      Referenceremoved
      http://www.openwall.com/lists/oss-security/2025/09/06/1
      —
      Reference typeremoved
      http://seclists.org/fulldisclosure/2025/Sep/49 Types: Third Party Advisory
      —
      Reference typeremoved
      http://seclists.org/fulldisclosure/2025/Sep/53 Types: Third Party Advisory
      —
      Reference typeremoved
      http://seclists.org/fulldisclosure/2025/Sep/56 Types: Third Party Advisory
      —
      Reference typeremoved
      http://seclists.org/fulldisclosure/2025/Sep/57 Types: Third Party Advisory
      —
      Reference typeremoved
      http://seclists.org/fulldisclosure/2025/Sep/58 Types: Third Party Advisory
      —
      Reference typeremoved
      http://www.openwall.com/lists/oss-security/2025/09/06/1 Types: Third Party Advisory
      —

      Source identifier: af854a3a-2127-422b-91ae-364da2661108

    3. Record modifiedSiemens ADP

      Show 8 original changes
      Individual changes of this event as published by NVD
      TypeActionBeforeAfter
      Affected versions (publisher)added
      —
      Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2025/6xxx/CVE-2025-6965.json">CVE-2025-6965</a>
      Referenceadded
      —
      https://cert-portal.siemens.com/productcert/html/ssa-225816.html
      Referenceadded
      —
      https://cert-portal.siemens.com/productcert/html/ssa-485750.html
      Referenceadded
      —
      https://cert-portal.siemens.com/productcert/html/ssa-765416.html
      Referenceremoved
      https://cert-portal.siemens.com/productcert/html/ssa-225816.html
      —
      Referenceremoved
      https://cert-portal.siemens.com/productcert/html/ssa-485750.html
      —
      Reference typeremoved
      https://cert-portal.siemens.com/productcert/html/ssa-225816.html Types: Third Party Advisory
      —
      Reference typeremoved
      https://cert-portal.siemens.com/productcert/html/ssa-485750.html Types: Third Party Advisory
      —

      Source identifier: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

    Linked CVEs

    Linked CVEs
    MediumCVE-2026-35154Dell PowerProtect Data Domain appliances: Improper Privilege Management6.7—
    MediumCVE-2026-35153Dell PowerProtect Data Domain: Argument Injection6.7—
    MediumCVE-2026-35074Dell PowerProtect Data Domain: OS Command Injection6.7—
    MediumCVE-2026-35073Dell PowerProtect Data Domain: OS Command Injection6.7—
    MediumCVE-2026-35072Dell PowerProtect Data Domain: OS Command Injection6.7—
    MediumCVE-2026-28263Dell PowerProtect Data Domain: Cross-site Scripting5.9—
    MediumCVE-2026-26951Dell PowerProtect Data Domain: Stack-based Buffer Overflow6.7—
    HighCVE-2026-26944Dell PowerProtect Data Domain: Missing Authentication for Critical Function8.8—
    HighCVE-2026-26943Dell PowerProtect Data Domain: OS Command Injection7.2—
    HighCVE-2026-26942Dell PowerProtect Data Domain: OS Command Injection7.2—
    HighCVE-2026-24506Dell PowerProtect Data Domain: OS Command Injection7.2—
    HighCVE-2026-24505Dell PowerProtect Data Domain: Improper Input Validation7.2—
    HighCVE-2026-24504Dell PowerProtect Data Domain: Improper Input Validation7.2—
    HighCVE-2026-23853Dell PowerProtect Data Domain: Use of Weak Credentials8.4—
    MediumCVE-2026-23779Dell PowerProtect Data Domain: Command Injection6.7—
    HighCVE-2026-23778Dell PowerProtect Data Domain: Command Injection7.2—
    MediumCVE-2026-23777Dell PowerProtect Data Domain: Exposure of Sensitive Information to an Unauthorized Actor6.5—
    HighCVE-2026-23776Dell PowerProtect Data Domain: Improper Certificate Validation8.8—
    HighCVE-2026-23775Dell PowerProtect Data Domain appliances: Insertion of Sensitive Information into Log File7.6—
    HighCVE-2026-23774Dell PowerProtect Data Domain: OS Command Injection7.2—
    HighCVE-2026-22761Dell PowerProtect Data Domain: OS Command Injection7.2—
    HighCVE-2025-7425Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr7.8—
    CriticalCVE-2025-6965Integer Truncation on SQLite9.8—
    LowCVE-2025-6170Libxml2: stack buffer overflow in xmllint interactive shell command handling2.5—
    Show 41 more CVEs
    Linked CVEs
    MediumCVE-2025-6069HTMLParser quadratic complexity when processing malformed inputs4.3—
    HighCVE-2025-6021Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml27.5—
    HighCVE-2025-6020Linux-pam: linux-pam directory traversal7.8—
    HighCVE-2025-5372Libssh: incorrect return code handling in ssh_kdf() in libssh8.8—
    MediumCVE-2025-5318Libssh: out-of-bounds read in sftp_handle()5.4—
    MediumCVE-2025-5278Coreutils: heap buffer under-read in gnu coreutils sort via key specification4.4—
    CriticalCVE-2025-49796Libxml: type confusion leads to denial of service (dos)9.1—
    CriticalCVE-2025-49794Libxml: heap use after free (uaf) leads to denial of service (dos)9.1—
    HighCVE-2025-48976Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers7.5—
    LowCVE-2025-4878Libssh: use of uninitialized variable in privatekey_from_file()3.6—
    MediumCVE-2025-4877Libssh: write beyond bounds in binary to base64 conversion functions4.5—
    MediumCVE-2025-46641Dell PowerProtect Data Domain: Improper Authentication6.6—
    HighCVE-2025-46607Dell PowerProtect Data Domain: Improper Authentication7.2—
    HighCVE-2025-46606Dell PowerProtect Data Domain: Improper Restriction of Excessive Authentication Attempts7.2—
    HighCVE-2025-46605Dell PowerProtect Data Domain: Session Fixation7.2—
    MediumCVE-2025-4598Systemd-coredump: Signal Handler Race Condition4.7—
    MediumCVE-2025-4516Use-after-free in "unicode_escape" decoder with error handler——
    MediumCVE-2025-4207PostgreSQL: Buffer Over-read5.9—
    MediumCVE-2025-37925Linux Kernel: security vulnerability5.5—
    MediumCVE-2025-37805Linux Kernel: security vulnerability5.5—
    HighCVE-2025-37803Linux Kernel: security vulnerability7.8—
    HighCVE-2025-37802Linux Kernel: security vulnerability7.5—
    HighCVE-2025-37801Linux Kernel: NULL Pointer Dereference7.8—
    HighCVE-2025-37800Linux Kernel: NULL Pointer Dereference7.1—
    HighCVE-2025-37785Linux Kernel: Use-After-Free7.8—
    HighCVE-2025-36568Dell PowerProtect Data Domain BoostFS: Insufficiently Protected Credentials7.8—
    MediumCVE-2025-23136Linux Kernel: NULL Pointer Dereference5.5—
    MediumCVE-2025-22063Linux Kernel: NULL Pointer Dereference5.5—
    HighCVE-2025-22038Linux Kernel: Out-of-Bounds Read8.3—
    HighCVE-2025-22037Linux Kernel: NULL Pointer Dereference7.5—
    MediumCVE-2025-22027Linux Kernel: Race Condition4.7—
    MediumCVE-2025-22018Linux Kernel: NULL Pointer Dereference5.5—
    MediumCVE-2025-22007Linux Kernel: security vulnerability5.5—
    MediumCVE-2025-21996Linux Kernel: security vulnerability5.5—
    HighCVE-2025-21993Linux Kernel: Out-of-Bounds Access7.1—
    MediumCVE-2025-0938URL parser allowed square brackets in domain names——
    MediumCVE-2024-9143Low-level invalid GF(2^m) parameters lead to OOB memory access4.3—
    MediumCVE-2024-47081Requests vulnerable to .netrc credentials leak via malicious URLs5.3—
    MediumCVE-2024-2236Libgcrypt: vulnerable to marvin attack5.9—
    MediumCVE-2024-12718Bypass extraction filter to modify file metadata outside extraction directory5.3—
    HighCVE-2016-9840zlib: security vulnerability8.8—
    Embed badge

    Show the severity and KEV status of this vulnerability on your site – with a link back here. The image is updated hourly.

    Badge preview for CVE-2025-6965
    <a href="https://intel.neosec.eu/en/cve/CVE-2025-6965"><img src="https://intel.neosec.eu/badge/cve/CVE-2025-6965.svg?lang=en" alt="CVE-2025-6965 – NEOSEC Intel" height="20"></a>