CVE-2025-8058 Details
UNDERGOING ENRICHMENT
The CVE is currently being enriched by the Volerion team. The enrichment process results in the association of reference link tags, CVSS, and CPE applicability statement data.
Description
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS-B:…Vector:This vulnerability is currently being analyzed.CVSS 3.x Severity and Vector Strings:
VolerionCVSS-B:…Vector:This vulnerability is currently being analyzed.No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 23, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://sourceware.org/bugzilla/show_bug.cgi?id=33185 | GNU C Library | |
| https://sourceware.org/git/?p=glibc.git;a=commit;h=3ff17af18c38727b88d9115e536c069e6b5d601f | GNU C Library | |
| http://www.openwall.com/lists/oss-security/2025/07/23/1 | CVE |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-415 | Double Free | GNU C Library |
Affected Products
This vulnerability is currently being analyzed
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | GNU C Library |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 4, 2025 | CVE Modified | CVE |
| Jul 23, 2025 | New CVE Received | GNU C Library |