CVE-2025-9820Medium· 4.0▾ SunlitA flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 22 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
0.2% → 0.2%
Last analysed / modified upstream
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-14831Medium· 5.3A flaw was found in GnuTLS
CVE-2026-116149High· 7.8ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images (CVE-2026-116149)
CVE-2026-92183High· 7.8gimp: gimp: Arbitrary code execution via stack-based buffer overflow in APNG parser (CVE-2026-92183)
CVE-2026-76919Medium· 6.5wireshark: Wireshark: Denial of Service vulnerability in ESS protocol dissector (CVE-2026-76919)
CVE-2026-76927Medium· 6.5wireshark: Wireshark: Denial of Service vulnerability in H.245 protocol dissector (CVE-2026-76927)
CVE-2026-79020Medium· 4.3chromium-browser: skia: chromium-browser: skia: Out of bounds read in Skia (CVE-2026-79020)