{"id":"CVE-2025-0838","aliases":["AZL-76815","AZL-76853","AZL-76968","AZL-77043","BELL-CVE-2025-0838","DEBIAN-CVE-2025-0838","DLA-4116-1","EUVD-2025-4520","GHSA-m9gf-vf48-rg58","OESA-2025-1219","SUSE-SU-2026:0190-1","SUSE-SU-2026:0338-1","SUSE-SU-2026:0381-1","SUSE-SU-2026:0412-1","SUSE-SU-2026:0576-1","SUSE-SU-2026:20268-1","SUSE-SU-2026:20361-1","UBUNTU-CVE-2025-0838","USN-7505-1","openSUSE-SU-2025:15473-1"],"status":"published","title":"Heap Buffer overflow in Abseil","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","severity":{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00627,"percentile":0.50328,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2025-02-21T14:20:52Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"abseil-cpp","fixed_in":["20220623.0-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"abseil-cpp","fixed_in":["20240116.0-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"mysql","fixed_in":["8.0.45-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"abseil","fixed_in":["20220623.1-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"abseil","fixed_in":["20240722.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"abseil","fixed_in":["20240722.0-3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"abseil","fixed_in":["0~20200923.3-2+deb11u1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"abseil-cpp","fixed_in":["20220623.1-6.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"abseil-cpp","fixed_in":["20230802.1-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"abseil-cpp","fixed_in":["20230802.1-6.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"abseil-cpp","fixed_in":["20210324.2-2.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"abseil-cpp","fixed_in":["20220623.1-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"abseil-cpp","fixed_in":["20240116.3-150600.19.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"abseil-cpp","fixed_in":["20240116.3-150600.19.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"abseil-cpp","fixed_in":["20240116.3-150500.13.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"abseil-cpp","fixed_in":["20240116.3-150500.13.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"abseil-cpp","fixed_in":["20240116.3-8.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"abseil-cpp","fixed_in":["20230802.3-150400.10.7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"abseil-cpp","fixed_in":["20230802.3-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"abseil-cpp","fixed_in":["20230802.3-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"abseil","fixed_in":["0~20210324.2-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"abseil","fixed_in":["20220623.1-3.1ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"abseil","fixed_in":["20240722.0-3ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"abseil-cpp","fixed_in":["20250814.0-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220623.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240116.0-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"8.0.45-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.45-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20220623.1-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20230125.3-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20230125.3-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220623.1-1+deb12u1"}]}],"versions":["20220623.1-1"]},{"source":"osv","ecosystem":"Debian:13","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240722.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240722.0-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20200923.3-2+deb11u1"}]}],"versions":["0~20200923.3-2"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220623.1-6.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230802.1-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230802.1-6.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20210324.2-2.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220623.1-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240116.3-150600.19.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240116.3-150600.19.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240116.3-150500.13.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240116.3-150500.13.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240116.3-8.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230802.3-150400.10.7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230802.3-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230802.3-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20210324.2-2ubuntu0.2"}]}],"versions":["0~20200923.3-3ubuntu1","0~20210324.2-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220623.1-3.1ubuntu3.2"}]}],"versions":["20220623.1-3","20220623.1-3.1ubuntu1","20220623.1-3.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20240722.0-3ubuntu1"}]}],"versions":["20230802.1-4.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0~20210324.2-2ubuntu0.2"}]}],"versions":["0~20200923.3-3ubuntu1","0~20210324.2-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"abseil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20220623.1-3.1ubuntu3.2"}]}],"versions":["20220623.1-3","20220623.1-3.1ubuntu1","20220623.1-3.1ubuntu3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"abseil-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20250814.0-2.1"}]}]}],"products":[{"vendor":"abseil","product":"abseil-cpp"},{"vendor":"abseil","product":"common_libraries"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://github.com/abseil/abseil-cpp/commit/5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","tags":["Patch","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00012.html","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0838","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m9gf-vf48-rg58"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-0838","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0838.json","tags":["advisory"]},{"url":"https://github.com/abseil/abseil-cpp","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-0838","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1219","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260190-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237543","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0838","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260338-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260381-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260412-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260576-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620268-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620361-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-0838","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-0838","tags":["report"]},{"url":"https://github.com/abseil/abseil-cpp/commit/caa7bb4457bfcafcd55a940204ef78c1bf1f417d","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7505-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-0838","title":"Heap Buffer overflow in Abseil","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T14:20:52.767Z","modified":"2025-04-05T16:02:54.716Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:32:53.475217Z"}],"euvd":[{"id":"EUVD-2025-4520","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T14:20:52Z","modified":"2025-04-05T16:02:54Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"medium"}],"updated_at":"2026-11-02T20:52:42.001814Z"}],"ghsa":[{"id":"GHSA-m9gf-vf48-rg58","title":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(),...","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:32:03Z","modified":"2025-07-30T18:32:33Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:03:09.000825Z"}],"nvd":[{"id":"CVE-2025-0838","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:15:11.89Z","modified":"2026-06-17T08:27:14.047Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:10:51.871789Z"}],"osv":[{"id":"BELL-CVE-2025-0838","status":"published","published":"2025-02-25T05:59:05.735997Z","modified":"2026-09-06T07:15:11.470956444Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2025-0838","title":"Heap Buffer overflow in Abseil","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T14:20:52.767Z","modified":"2026-10-28T10:59:00.305281657Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:45.712478Z"},{"id":"DEBIAN-CVE-2025-0838","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:15:11.89Z","modified":"2026-09-01T20:05:40.344338424Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"OESA-2025-1219","title":"abseil-cpp security update","description":"Abseil is an open-source collection of C++ library code designed to augment the C++ standard library. The Abseil library code is collected from Google\u0026amp;apos;s own C++ code base, has been extensively tested and used in production, and is the same code we depend on in our daily coding lives.\r\n\r\nSecurity Fix(es):\n\nThere exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container\u0026apos;s backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1(CVE-2025-0838)","status":"published","published":"2025-02-28T11:08:19Z","modified":"2026-08-18T01:18:49.133726941Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"UBUNTU-CVE-2025-0838","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:15:00Z","modified":"2026-04-22T15:30:08.439887Z","cvss":[{"version":"4.0","score":5.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"medium"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"AZL-76815","title":"CVE-2025-0838 affecting package abseil-cpp for versions less than 20220623.0-2","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:15:11Z","modified":"2026-04-21T04:34:04.775753Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"AZL-76853","title":"CVE-2025-0838 affecting package abseil-cpp for versions less than 20240116.0-3","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:15:11Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.626116Z"},{"id":"AZL-76968","title":"CVE-2025-0838 affecting package mysql 8.0.45-2","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:15:11Z","modified":"2026-04-21T04:34:07.970063Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"AZL-77043","title":"CVE-2025-0838 affecting package mysql for versions less than 8.0.45-2","description":"There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1","status":"published","published":"2025-02-21T15:15:11Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.626116Z"},{"id":"DLA-4116-1","title":"abseil - security update","status":"published","published":"2025-04-05T00:00:00Z","modified":"2026-03-09T01:18:22.015591Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2025:15473-1","title":"abseil-cpp-devel-20250814.0-2.1 on GA media","description":"These are all security issues fixed in the abseil-cpp-devel-20250814.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-21T00:00:00Z","modified":"2026-03-23T04:53:49.760399Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2026:0190-1","title":"Security update for abseil-cpp","description":"This update for abseil-cpp fixes the following issues:\n  \n- CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).\n","status":"withdrawn","published":"2026-01-20T16:57:25Z","modified":"2026-07-13T14:00:32.659286102Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0338-1","title":"Security update for abseil-cpp","description":"This update for abseil-cpp fixes the following issues:\n\n- CVE-2025-0838: Fixed heap buffer overflow in sized constructors, reserve(), and rehash() methods of absl:{flat,node}hash{set,map} (bsc#1237543).\n","status":"published","published":"2026-01-29T10:35:48Z","modified":"2026-03-23T04:52:09.074294Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0381-1","title":"Security update for abseil-cpp","description":"This update for abseil-cpp fixes the following issues:\n\nUpdate to 20240116.3\n\n- CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).\n","status":"published","published":"2026-02-04T09:34:53Z","modified":"2026-03-23T04:51:44.573066Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0412-1","title":"Security update for abseil-cpp","description":"This update for abseil-cpp fixes the following issues:\n\nUpdate to 20240116.3\n\n- CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).\n","status":"published","published":"2026-02-10T06:43:35Z","modified":"2026-03-23T04:52:12.781321Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:0576-1","title":"Security update for abseil-cpp","description":"This update for abseil-cpp fixes the following issues:\n\nUpdate to version 20230802.3\n\n- CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (bsc#1237543).\n","status":"published","published":"2026-02-18T09:12:48Z","modified":"2026-03-23T04:52:21.533896Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20268-1","title":"Security update for abseil-cpp","description":"This update for abseil-cpp fixes the following issues:\n\nUpdate to version 20230802.3:\n\n- CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (#1813) (bsc#1237543).\n","status":"published","published":"2026-01-20T09:41:09Z","modified":"2026-03-23T04:53:14.604135Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20361-1","title":"Security update for abseil-cpp","description":"This update for abseil-cpp fixes the following issues:\n\nUpdate to version 20230802.3:\n\n- CVE-2025-0838: Fixed potential integer overflow in hash container create/resize (#1813) (bsc#1237543).\n","status":"published","published":"2026-01-20T09:46:41Z","modified":"2026-03-23T04:53:19.682182Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"USN-7505-1","title":"abseil vulnerability","description":"It was discovered that Abseil incorrectly handled memory with the upper\nbound of the size argument. An attacker could possibly use this issue to\ncause a denial of service or memory corruption.","status":"published","published":"2025-05-12T11:43:43Z","modified":"2026-04-27T18:00:08.533368Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}