{"id":"CVE-2025-0838","summary":"Heap Buffer overflow in Abseil","details":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","modified":"2026-08-18T16:55:35.428440Z","published":"2025-02-21T14:20:52.767Z","related":["SUSE-SU-2026:0338-1","SUSE-SU-2026:0381-1","SUSE-SU-2026:0412-1","SUSE-SU-2026:0576-1","SUSE-SU-2026:20268-1","SUSE-SU-2026:20361-1","openSUSE-SU-2025:15473-1"],"database_specific":{"cwe_ids":["CWE-190"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0838.json","unresolved_ranges":[{"extracted_events":[{"fixed":"5a0e2cb5e3958dd90bb8569a2766622cb74d90c1"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"Google"},"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00012.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0838.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0838"},{"type":"FIX","url":"https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622cb74d90c1"},{"type":"PACKAGE","url":"https://github.com/abseil/abseil-cpp"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/abseil/abseil-cpp","events":[{"introduced":"0"},{"fixed":"9ac7062b1860d895fb5a8cbf58c3e9ef8f674b5f"},{"fixed":"5a0e2cb5e3958dd90bb8569a2766622cb74d90c1"}],"database_specific":{"cpe":"cpe:2.3:a:abseil:common_libraries:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"20250127.0"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["20250127.rc1"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-0838.json","vanir_signatures_modified":"2026-08-18T16:55:35Z","vanir_signatures":[{"target":{"file":"absl/random/internal/randen_detect.cc","function":"ReadSysctlByName"},"deprecated":false,"digest":{"function_hash":"97291139358825537072199480356481516117","length":242},"id":"CVE-2025-0838-0f916922","signature_type":"Function","signature_version":"v1","source":"https://github.com/abseil/abseil-cpp/commit/9ac7062b1860d895fb5a8cbf58c3e9ef8f674b5f"},{"source":"https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","target":{"file":"absl/container/internal/raw_hash_set_test.cc"},"deprecated":false,"digest":{"line_hashes":["302866912177723989834998072246563076676","108587633537507210242609878158511307392","168585091657632749831189831106559017445"],"threshold":0.9},"id":"CVE-2025-0838-70408d69","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["196322429488803169946656567063544212150","120063295540870224252334452688430131419","107844395201159193075845461668031090738","214129192229071188727958629632043904028","209412599944108461086069608004052578352","339676684706118172206265814700567649220","250601256813417975392069456638430394339"],"threshold":0.9},"id":"CVE-2025-0838-73ead8f7","signature_type":"Line","signature_version":"v1","source":"https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","target":{"file":"absl/container/internal/raw_hash_set.cc"}},{"deprecated":false,"digest":{"line_hashes":["128803430385030363960233165377333815226","184482724629412295315999015421978273250","249726458520501633949129240983331585499","252024995536440775070325697722422120322"],"threshold":0.9},"id":"CVE-2025-0838-856d7cd8","signature_type":"Line","signature_version":"v1","source":"https://github.com/abseil/abseil-cpp/commit/9ac7062b1860d895fb5a8cbf58c3e9ef8f674b5f","target":{"file":"absl/random/internal/randen_detect.cc"}},{"source":"https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","target":{"file":"absl/container/internal/raw_hash_set.h"},"deprecated":false,"digest":{"line_hashes":["338669480992124172521663762393859046545","103420730450143868196667306456790233601","55368310963703604166546176273151625527","261183074072603629905480839093114192324","42852039379342248413742780251936658964","324290404210311186240839110500162778118","206857184631474550558186954382213564625","260986666334530949380029701212842446821","4314240451653420688887599635783531637","104509509516305631526955053225617527677","254517409091144281803580005759211295428","247382229631437902036020801246761690982","206094384022907040369081095671023029929","169930438463862701831910351909639499727","132577442977697908417486600047586272994","60093131311153041194507000092676585518","62400307961718354020969675025447459489","136324682708838925239023965547315389812","304723717826515129969740721341041200033","147520603739132135251831733954894849015","204793086442702716354062400985162887484","261061227158621016258738102405648326997","190267957338328497265902168936059347722"],"threshold":0.9},"id":"CVE-2025-0838-eecf2dcc","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L"}]}