CVE detail
CVE-2025-32990
A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 27.1 · diversity 14.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
14 source links · newest first
No excerpt available.
Vendor Advisorylists.debian.orgJul 10, 2025, 10:15 AM- http://www.openwall.com/lists/oss-security/2025/07/11/3www.openwall.com
No excerpt available.
Exploitwww.openwall.comJul 10, 2025, 10:15 AM No excerpt available.
Vendor Advisorylists.gnupg.orgJul 10, 2025, 10:15 AM- https://bugzilla.redhat.com/show_bug.cgi?id=2359620bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/security/cve/CVE-2025-32990access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2026:7477access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:22529access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:19088access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:17415access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:17361access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:17348access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:17181access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:16116access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM - https://access.redhat.com/errata/RHSA-2025:16115access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comJul 10, 2025, 10:15 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-12725CVSS 5.9 · Medium
A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or d…
- CVE-2026-9149CVSS 6.5 · Medium
A flaw was found in libsolv. This heap buffer overflow vulnerability occurs when a victim processes a specially crafted `.solv` file containing negative size values in the `repo_a…
- CVE-2026-6846CVSS 7.8 · High
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking…
- CVE-2025-5915CVSS 6.6 · Medium
A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv…
- CVE-2026-42009CVSS 7.5 · High
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible…
- CVE-2026-42010CVSS 7.1 · High
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernam…