VDB
GO-2025-3678
GO-2025-3678
PUBLISHED
Ring: some aes functions may panic when overflow checking is enabled in ring in github.com/briansmith/ring
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | zed | 0 |
| chainguard | sccache | 0, 0 |
| chainguard | rye | 0, 0 |
| wolfi | wadm | 0 |
| wolfi | rye | 0, 0 |
| chainguard | zizmor | 0 |
| chainguard | wasm-pack | 0 |
| wolfi | wasm-pack | 0 |
| wolfi | wash | 0, 0 |
| wolfi | buck2 | 0 |
| chainguard | rustls-ffi | 0 |
| chainguard | qdrant | 0 |
| chainguard | buck2 | 0 |
| chainguard | rustup | 0 |
| chainguard | linkerd-extension-init | 0 |
| wolfi | zizmor | 0 |
| chainguard | sdp-k8s-injector | 0 |
| chainguard | zola | 0, 0 |
| github.com | briansmith/ring | 0 |
| wolfi | uv | 0 |
…and 50 more
Timeline
- May 15, 2025 CVE Published
- May 30, 2026 CVE Updated
- Sep 1, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-4432 advisory
- https://github.com/briansmith/ring/commit/ec2d3cf1d91f148c84e4806b4f0b3c98f6df3b38 patch
- https://github.com/briansmith/ring/pull/2447 patch
- https://bugzilla.redhat.com/show_bug.cgi?id=2350655 report
- https://access.redhat.com/security/cve/CVE-2025-4432 url
- https://github.com/briansmith/ring url
- https://github.com/briansmith/ring/blob/main/RELEASES.md#version-01712-2025-03-05 url
- https://rustsec.org/advisories/RUSTSEC-2025-0009.html url