CVE-2025-5278

Publication date

2025-05-27 20:52:58

Family

redhat

State

PUBLISHED

Description

A flaw was found in GNU Coreutils. The sort utilitys begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.