ZeroDay Findings
Sign inSign up

Findings

CVE-2025-5278

A flaw was found in GNU Coreutils.

Published May 27, 2025 · updated Oct 14, 2026

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 27, 2025 · NIST NVD

    Detected

    A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

  3. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.

Sources

  • CVE.orgVulnerability recordCVE-2025-5278

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-5278

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDVulnerability recordCVE-2025-5278

    A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a cra

    nvd.nist.gov

References