CVE-2025-8058
Severity CVSS v4.0:
MEDIUM
Type:
CWE-415
Double Free
Publication date:
23/07/2025
Last modified:
23/07/2025
Description
The regcomp function in the GNU C library version from 2.4 to 2.41 is <br />
subject to a double free if some previous allocation fails. It can be <br />
accomplished either by a malloc failure or by using an interposed malloc<br />
that injects random malloc failures. The double free can allow buffer <br />
manipulation depending of how the regex is constructed. This issue <br />
affects all architectures and ABIs supported by the GNU C library.
Impact
Base Score 4.0
5.90
Severity 4.0
MEDIUM