{"id":"CVE-2025-71436","aliases":["ALSA-2026:94519","AZL-112723","BELL-CVE-2025-71436","DEBIAN-CVE-2025-71436","EUVD-2025-211138","GHSA-m7mm-cj97-2wxq","OESA-2026-4755","OESA-2026-4756","OESA-2026-4757","OESA-2026-4758","RLSA-2026:94519","UBUNTU-CVE-2025-71436"],"status":"published","title":"Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","severity":{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00496,"percentile":0.4288,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-10-20T15:40:22Z","modified":"2026-11-11T12:45:06Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"raptor2","fixed_in":["2.0.15-18.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"raptor2-devel","fixed_in":["2.0.15-18.el8_10"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"raptor2","fixed_in":["2.0.15-22.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"raptor2","fixed_in":["2.0.15-22.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"raptor2","fixed_in":["2.0.15-22.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"raptor2","fixed_in":["2.0.15-22.oe2403sp4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"raptor2","fixed_in":["0:2.0.15-18.el8_10"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-18.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"raptor2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-18.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.0.15-29"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.16-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.16-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.16-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.15-4","2.0.15-4+deb12u1","2.0.16-1","2.0.16-2","2.0.16-3","2.0.16-4","2.0.16-5","2.0.16-6","2.0.16-7"]},{"source":"osv","ecosystem":"Debian:13","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.16-6","2.0.16-7"]},{"source":"osv","ecosystem":"Debian:14","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.16-6","2.0.16-7"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-22.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-22.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-22.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.15-22.oe2403sp4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-18.el8_10"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.14-1","2.0.14-1ubuntu0.16.04.1","2.0.14-1ubuntu0.16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.14-1build1","2.0.14-1ubuntu0.18.04.1","2.0.14-1ubuntu0.18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.15-0ubuntu1","2.0.15-0ubuntu1.20.04.1","2.0.15-0ubuntu1.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.15-0ubuntu2","2.0.15-0ubuntu3","2.0.15-0ubuntu4","2.0.15-0ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.16-3","2.0.16-3build1","2.0.16-3build2","2.0.16-3build3","2.0.16-3ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.16-6build1","2.0.16-7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"raptor2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.16-6","2.0.16-6build1"]}],"products":[{"vendor":"librdf","product":"raptor rdf syntax library"}],"references":[{"url":"https://github.com/dajobe/raptor/issues/83","tags":["issue-tracking","exploit","report"]},{"url":"https://github.com/dajobe/raptor/commit/361a803a72817ae771db2438277229e6541e1575","tags":["patch","fix"]},{"url":"https://github.com/dajobe/raptor/blob/raptor2_2_0_16/src/raptor_term.c#L200-L218","tags":["technical-description","article"]},{"url":"https://github.com/dajobe/raptor/blob/raptor2_2_0_16/src/raptor_term.c#L270-L287","tags":["technical-description","article"]},{"url":"https://www.vulncheck.com/advisories/raptor-rdf-syntax-library-2.0.15-through-2.0.16-heap-buffer-overflow-via-language-tag","tags":["third-party-advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71436","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m7mm-cj97-2wxq"},{"url":"https://access.redhat.com/errata/RHSA-2026:94519","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-71436","tags":["report"]},{"url":"https://bugzilla.redhat.com/2556277","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-94519.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-71436","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71436.json","tags":["advisory"]},{"url":"https://github.com/dajobe/raptor","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-71436","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4755","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4756","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4757","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4758","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:94519","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556277","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-71436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-71436","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-71436","title":"Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","status":"published","published":"2026-10-20T15:40:22.461Z","modified":"2026-10-20T16:41:49.461Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:42.751171Z"}],"euvd":[{"id":"EUVD-2025-211138","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","status":"published","published":"2026-10-20T15:40:22Z","modified":"2026-10-20T16:41:49Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:59:43.600473Z"}],"ghsa":[{"id":"GHSA-m7mm-cj97-2wxq","title":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow...","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","status":"published","published":"2026-10-20T18:31:42Z","modified":"2026-10-20T18:31:49Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:14:04.153849Z"}],"nvd":[{"id":"CVE-2025-71436","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","status":"published","published":"2026-10-20T16:16:59.067Z","modified":"2026-10-28T14:10:00.22Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:03.20248Z"}],"osv":[{"id":"BELL-CVE-2025-71436","status":"published","published":"2026-10-21T06:07:46.719565Z","modified":"2026-10-28T07:15:04.639899509Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.77042Z"},{"id":"CVE-2025-71436","title":"Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","status":"published","published":"2026-10-20T15:40:22.461Z","modified":"2026-11-04T16:57:05.393233644Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-04T17:11:08.071099Z"},{"id":"DEBIAN-CVE-2025-71436","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","status":"published","published":"2026-10-20T16:16:59.067Z","modified":"2026-10-29T09:47:28.370007967Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:45:48.440897Z"},{"id":"OESA-2026-4755","title":"raptor2 security update","description":"Raptor is Redland\u0026amp;apos;s RDF parser toolkit, which provides a set of independent RDF parsers to generate triples from RDF / XML or N-Triples.\r\n\r\nSecurity Fix(es):\n\nRaptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.(CVE-2025-71436)","status":"published","published":"2026-11-11T12:25:50Z","modified":"2026-11-11T12:45:05.987901909Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-11T13:08:46.301371Z"},{"id":"OESA-2026-4756","title":"raptor2 security update","description":"Raptor is Redland\u0026amp;apos;s RDF parser toolkit, which provides a set of independent RDF parsers to generate triples from RDF / XML or N-Triples.\r\n\r\nSecurity Fix(es):\n\nRaptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.(CVE-2025-71436)","status":"published","published":"2026-11-11T12:25:51Z","modified":"2026-11-11T12:45:06.205801515Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-11T13:08:46.301371Z"},{"id":"OESA-2026-4757","title":"raptor2 security update","description":"Raptor is Redland\u0026amp;apos;s RDF parser toolkit, which provides a set of independent RDF parsers to generate triples from RDF / XML or N-Triples.\r\n\r\nSecurity Fix(es):\n\nRaptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.(CVE-2025-71436)","status":"published","published":"2026-11-11T12:25:52Z","modified":"2026-11-11T12:45:05.279920863Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-11T13:08:46.301371Z"},{"id":"OESA-2026-4758","title":"raptor2 security update","description":"Raptor is Redland\u0026amp;apos;s RDF parser toolkit, which provides a set of independent RDF parsers to generate triples from RDF / XML or N-Triples.\r\n\r\nSecurity Fix(es):\n\nRaptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.(CVE-2025-71436)","status":"published","published":"2026-11-11T12:25:52Z","modified":"2026-11-11T12:45:05.291134241Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-11T13:08:46.301371Z"},{"id":"RLSA-2026:94519","title":"Important: raptor2 security update","description":"Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. \n\nSecurity Fix(es):\n\n* raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-11-04T09:02:51.657016Z","modified":"2026-11-04T09:45:02.44471634Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-04T10:05:57.467041Z"},{"id":"UBUNTU-CVE-2025-71436","description":"(Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-b ...)","status":"published","published":"2026-11-09T00:00:00Z","modified":"2026-11-10T02:50:20.789094107Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"},{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-10T03:18:56.552317Z"},{"id":"ALSA-2026:94519","title":"Important: raptor2 security update","description":"Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples.   \n\nSecurity Fix(es):  \n\n  * raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-11-03T00:00:00Z","modified":"2026-11-04T16:45:02.642031648Z","updated_at":"2026-11-04T17:11:08.071099Z"},{"id":"AZL-112723","title":"CVE-2025-71436 affecting package raptor2 2.0.15-29","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","status":"published","published":"2026-10-20T16:16:59Z","modified":"2026-11-07T14:18:06.491625532Z","updated_at":"2026-11-07T14:48:11.583685Z"}]}}