There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1
CVSS Details
- CVSS 4.0 Base Score: 5.9 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | amazon-linux-2023-upgrade-abseil-cppamazon-linux-2023-upgrade-abseil-cpp-debuginfoamazon-linux-2023-upgrade-abseil-cpp-debugsourceamazon-linux-2023-upgrade-abseil-cpp-devel | Jun 24, 2025 | Feb 21, 2025 | |
| Debian | debian-upgrade-abseil | Apr 7, 2025 | Feb 21, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-abseil-cpp | Jun 13, 2025 | Feb 21, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-abseil-cpp | Jun 11, 2025 | Feb 21, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-abseil-cpp | Jul 1, 2025 | Feb 21, 2025 | |
| Suse | — | suse-upgrade-abseil-cpp-develsuse-upgrade-libabsl2401_0_0suse-upgrade-libabsl2401_0_0-32bit | Jan 30, 2026 | Jan 20, 2026 |
| Ubuntu | ubuntu-upgrade-libabsl20210324ubuntu-upgrade-libabsl20220623t64ubuntu-upgrade-libabsl20230802 | May 15, 2025 | Feb 21, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Feb 9, 2026 | Feb 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub