CVE-2025-15281 Details
Description
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
A vulnerability exists in the GNU C Library (glibc) versions 2.0 through 2.42, where the wordexp function, when called with the WRDE_REUSE and WRDE_APPEND flags, can return uninitialized memory in the we_wordv member. This uninitialized memory can lead to process termination when wordfree is called. The issue arises because the WRDE_REUSE flag does not properly reset the we_wordc member, causing the function to skip uninitialized entries in the wordv array. Subsequent calls to wordfree can then dereference invalid pointers, leading to a crash.
Users can upgrade to glibc version 2.43 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://sourceware.org/bugzilla/show_bug.cgi?id=33814 | GNU C Library | Issue TrackingPatch |
| http://www.openwall.com/lists/oss-security/2026/01/20/3 | CVE | Mailing ListThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | GNU C Library |
Affected Products
| Product | Versions |
|---|---|
| gnu glibc | >= 2.0, < 2.43 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | GNU C Library |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Feb 5, 2026 | Initial Analysis | [email protected] |
| Jan 22, 2026 | CVE Modified | CISA-ADP |
| Jan 20, 2026 | CVE Modified | CVE |
| Jan 20, 2026 | New CVE Received | GNU C Library |