CVE-2025-5278

Name of the Vulnerable Software and Affected Versions GNU Coreutils (affected versions not specified)

Description A flaw was found in the sort utility's begfield() function, which is vulnerable to a heap buffer under-read. This issue may cause the program to access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.