CVE-2025-6395
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-07-10
Last updated on: 2026-04-23
Assigner: Red Hat, Inc.
Description
Description
A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| gnutls | gnutls | 3.1 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a NULL pointer dereference flaw in the GnuTLS software within the function _gnutls_figure_common_ciphersuite(). When the software reads certain settings from a template file, it can cause an out-of-bounds NULL pointer write, leading to memory corruption and potentially crashing the system.
How can this vulnerability impact me? :
The vulnerability can cause a denial of service (DoS) by crashing the system due to memory corruption from an out-of-bounds NULL pointer write. This could disrupt availability of services relying on GnuTLS.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70