CVE-2025-13654
High · 7.5CVSS
7.5
EPSS
0.9%
Published
Dec 5, 2025
CISA due date
—
The record
A stack buffer overflow vulnerability exists in the buffer_get function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | duc | 0 | 1.4.6-1.1 |