VDB
RHSA-2025:14186
RHSA-2025:14186
PUBLISHED
CVSS 4.199999809265137 MEDIUM
A double-free vulnerability has been discovered in glibc (GNU C Library). This flaw occurs during bracket expression parsing within the regcomp function, specifically when a memory allocation failure takes place. Exploitation of a double-free vulnerability can lead to memory corruption, which could enable an attacker to achieve arbitrary code execution or a denial of service condition.
Risk Scores
CVSS 3.1
4.199999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/discovery/discovery-server-rhel9@sha256:7d200c5dcd40e0885171fe20e3edb5d432a8675080846fb3ba273c601c5957a1_amd64 as a component of Red Hat Discovery 2 | * |
| Red Hat | registry.redhat.io/discovery/discovery-ui-rhel9@sha256:9406c22bb1db456a5c81251cf1763822eb008504ad654203a1edc77076596c1d_amd64 as a component of Red Hat Discovery 2 | * |
| Red Hat | registry.redhat.io/discovery/discovery-ui-rhel9@sha256:433bf55ccfa4cf7280f586fb3471bf84246e7f428f8ee9e99de9e36b635b7b09_arm64 as a component of Red Hat Discovery 2 | * |
| Red Hat | registry.redhat.io/discovery/discovery-server-rhel9@sha256:6464f1f591001fd514a87e3c7347d2ce709b9c97edaad2d0d649ae69499049e9_arm64 as a component of Red Hat Discovery 2 | * |
Timeline
- Aug 20, 2025 CVE Published
- Aug 2, 2026 CVE Updated
- Aug 2, 2026 Distribution Patch
- Aug 2, 2026 Distribution Patch
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
- Aug 2, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:14186 advisory
- https://access.redhat.com/security/cve/CVE-2025-32415 advisory
- https://access.redhat.com/security/cve/CVE-2025-8058 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14186.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2383146 issue
- https://www.cve.org/CVERecord?id=CVE-2025-8058 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-8058 advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=33185 issue
- https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2360768 issue
- https://www.cve.org/CVERecord?id=CVE-2025-32415 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-32415 advisory
- https://gitlab.gnome.org/GNOME/libxml2/-/issues/890 advisory