Vulnerability · Published Feb 21, 2025 · Assigned by Google
CVE-2025-0838Heap Buffer overflow in Abseil
Medium 5.9
In plain English
A medium-severity integer overflow in abseil-cpp from abseil. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | abseil | 20220623.1-1+deb12u1 | DEBIAN-CVE-2025-0838 |
| Debian:13 | abseil | 20240722.0-3 | DEBIAN-CVE-2025-0838 |
| Debian:14 | abseil | 20240722.0-3 | DEBIAN-CVE-2025-0838 |
| Ubuntu:22.04:LTS | abseil | 0~20210324.2-2ubuntu0.2 | USN-7505-1 |
| Ubuntu:22.04:LTS | abseil | 0~20210324.2-2ubuntu0.2 | UBUNTU-CVE-2025-0838 |
| Ubuntu:24.04:LTS | abseil | 20220623.1-3.1ubuntu3.2 | UBUNTU-CVE-2025-0838 |
| Ubuntu:24.04:LTS | abseil | 20220623.1-3.1ubuntu3.2 | USN-7505-1 |
| Ubuntu:25.10 | abseil | 20240722.0-3ubuntu1 | UBUNTU-CVE-2025-0838 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| abseil | abseil-cpp | 0 – before 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1 |
Weakness: CWE-190 · Vector: CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L