Skip to main content

Heap-based Buffer Overflow

CVE-2025-6490

Low
1.9/10

Summary

A vulnerability was found in sparklemotion nokogiri and classified as problematic. This issue affects the function "hashmap_set_with_hash" of the file "gumbo-parser/src/hashmap.c". The manipulation leads to Heap-based Buffer Overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • NONE
  • LOW

CWE-122 - Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References

Advisory Timeline

  • Published