CVE-2025-0838

Name of the Vulnerable Software and Affected Versions Abseil versions prior to commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1 Abseil versions prior to 20230802.1-4ubuntu1.2 Abseil versions prior to 0~20200923.3-2+deb11u1

Description Abseil-cpp contains a heap buffer overflow issue. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not enforce a limit on the size of their input argument. This allowed a malicious actor to provide a large size, causing an integer overflow when calculating the container's backing store size, leading to an out-of-bounds memory write. Subsequent access to the container could also result in out-of-bounds memory access. The issue could potentially allow an attacker to cause a denial of service or memory corruption.

Recommendations Upgrade to a version past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1. Upgrade to version 20230802.1-4ubuntu1.2. Upgrade to version 0~20200923.3-2+deb11u1.