CVE-2025-5702: gnu glibc Improper Initialization

CVSS: 5.6v3.1MediumAnalyzed

AliasesRHSA-2025:11066RHSA-2025:9877UBUNTU-CVE-2025-5702+4 more

Published 05-06-2025Last modified 05-06-2025

Vulnerability summary

CVE-2025-5702 is a medium (CVSS 5.6) Improper Initialization vulnerability in gnu glibc. EPSS estimates a 0.31% chance of exploitation in the next 30 days, higher than 21.8% of scored vulnerabilities.

Overall risk

22/100

0100

Low · default modelHow is this calculated?

CVSS score

5.6/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.31%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 2

USN-7634-1 CGA-683W-36P3-3Q3P

Timeline

05-06-2025
PublishedVulnerability first disclosed.
05-06-2025
Last modifiedVulnerability information updated.

Description

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.

CVSS metrics

7 scores · 7 sources · 1 version

v3.15.6

EPSS trend

Probability

0.31%

Chance of exploitation in the next 30 days

Percentile

22%

Versus all other CVEs

30-day change

0.00 pp

From 0.31% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-665Improper InitializationThe product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

Affected systems

Redhat194 products

glibc< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-all-langpacks< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-benchtests< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-benchtests-debuginfo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-common< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20

glibc-common-debuginfo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-debuginfo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-debugsource< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-devel< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-doc< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-gconv-extra< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-gconv-extra-debuginfo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-headers< 0:2.34-168.el9_6.20
glibc-langpack-aa< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-af< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-agr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ak< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-am< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-an< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-anp< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ar< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-as< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ast< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ayc< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-az< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-be< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bem< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ber< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bg< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bhb< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bho< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bi< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-br< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-brx< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-bs< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-byn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ca< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ce< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-chr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ckb< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-cmn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-crh< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-cs< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-csb< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-cv< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-cy< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-da< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-de< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-doi< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-dsb< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-dv< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-dz< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-el< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-en< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-eo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-es< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-et< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-eu< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-fa< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ff< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-fi< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-fil< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-fo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-fr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-fur< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-fy< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ga< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-gbm< 0:2.39-43.el10_0
glibc-langpack-gd< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-gez< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-gl< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-gu< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-gv< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ha< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hak< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-he< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hi< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hif< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hne< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hsb< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ht< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hu< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-hy< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ia< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-id< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ig< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ik< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-is< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-it< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-iu< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ja< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ka< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-kab< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-kk< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-kl< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-km< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-kn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ko< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-kok< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ks< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ku< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-kv< 0:2.39-43.el10_0
glibc-langpack-kw< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ky< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-lb< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-lg< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-li< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-lij< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ln< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-lo< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-lt< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-lv< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-lzh< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mag< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mai< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mfe< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mg< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mhr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mi< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-miq< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mjw< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mk< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ml< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mni< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mnw< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ms< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-mt< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-my< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nan< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nb< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nds< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ne< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nhn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-niu< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nl< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-nso< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-oc< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-om< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-or< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-os< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-pa< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-pap< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-pl< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ps< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-pt< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-quz< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-raj< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-rif< 0:2.39-43.el10_0
glibc-langpack-ro< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ru< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-rw< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sa< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sah< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sat< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sc< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sd< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-se< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sgs< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-shn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-shs< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-si< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sid< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sk< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sl< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sm< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-so< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sq< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sr< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ss< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ssy< 0:2.39-43.el10_0
glibc-langpack-st< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-su< 0:2.39-43.el10_0
glibc-langpack-sv< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-sw< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-syr< 0:2.39-43.el10_0
glibc-langpack-szl< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ta< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-tcy< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-te< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-tg< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-th< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-the< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-ti< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-tig< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-tk< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-tl< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20
glibc-langpack-tn< 0:2.39-43.el10_0 | < 0:2.34-168.el9_6.20

Show all 194

Chainguard1 product

glibcAll versions (No fix recorded)

Debian1 product

glibc< 2.41-9

Gnu1 product

glibc≥ 2.39, < 2.39-209 | ≥ 2.40, < 2.40-139 | ≥ 2.41, < 2.41-60

Opensuse1 product

grype&distro=openSUSE Tumbleweed< 0.94.0-1.1

Ubuntu1 product

glibc< 2.39-0ubuntu8.5

Wolfi1 product

glibcAll versions (No fix recorded)

7 vendors · 200 products · Showing 200 of 241. Use Open JSON for the complete list.

References

19 links

sourceware.org/bugzilla/show_bug.cgi?id=33056ARTICLEREPORTIssue Tracking
access.redhat.com/errata/RHSA-2025:11066Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2370472REPORT
issues.redhat.com/browse/RHEL-102555ARTICLE
issues.redhat.com/browse/RHEL-84837ARTICLE
issues.redhat.com/browse/RHEL-87416ARTICLE
issues.redhat.com/browse/RHEL-97433ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11066.jsonAdvisory
access.redhat.com/security/cve/CVE-2025-5702REPORT

Show all 19 references

www.cve.org/CVERecord?id=CVE-2025-5702AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2025-5702Advisory
access.redhat.com/errata/RHSA-2025:9877Advisory
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9877.jsonAdvisory
ubuntu.com/security/CVE-2025-5702REPORT
sourceware.org/pipermail/libc-alpha/2025-June/167381.htmlREPORT
ubuntu.com/security/notices/USN-7634-1Advisory
security-tracker.debian.org/tracker/CVE-2025-5702Advisory
www.suse.com/security/cve/CVE-2025-5702WEB

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities