CVE-2018-25153

7.5 HIGH
Published: December 24, 2025 Modified: December 26, 2025

Description

GNU Barcode 0.99 contains a memory leak vulnerability in the command line processing function within cmdline.c. Attackers can exploit this vulnerability by providing specially crafted input that causes unfreed memory allocations, potentially leading to denial of service conditions.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://directory.fsf.org/wiki/Barcode
Source: disclosure@vulncheck.com
https://www.exploit-db.com/exploits/44798
Source: disclosure@vulncheck.com
https://www.gnu.org/software/barcode/
Source: disclosure@vulncheck.com
http://www.openwall.com/lists/oss-security/2025/12/26/1
Source: af854a3a-2127-422b-91ae-364da2661108

4 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.5 / 10.0
EPSS (Exploit Probability)
0.0%
7th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)