Skip to content
OpenAdvisories
Medium USN-7505-1 1 CVE

abseil vulnerability

Published May 12, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Abseil incorrectly handled memory with the upper
bound of the size argument. An attacker could possibly use this issue to
cause a denial of service or memory corruption.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS abseil 0~20210324.2-2ubuntu0.2
Ubuntu · 24.04 LTS 24.04:LTS abseil 20220623.1-3.1ubuntu3.2

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-0838

    Heap Buffer overflow in Abseil

    There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a v…

    abseil abseil-cpp mysql abseil-cpp Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-0838