CVE-2025-2724

What it actually does

The flaw allows an attacker to trigger an out-of-bounds read in the sorting_key_copy function by supplying a specially crafted Name argument, resulting in memory corruption on the local host.

Why it matters to the business

Attackers with local access could cause application crashes or limited memory disclosure on affected systems, leading to service disruption for users of the impacted Red Hat package.

How an attack unfolds

An attacker with local access to the host crafts input that manipulates the Name argument passed to sorting_key_copy, triggering an out-of-bounds read and resulting memory corruption.

How to fix it

Upgrade flash-plugin on Red Hat rhel_extras:6 to version 0:32.0.0.142-1.el6_10 or later.

How to confirm the fix worked

Confirm the installed flash-plugin package version meets or exceeds 0:32.0.0.142-1.el6_10 and verify the vulnerability is no longer reproducible through local testing.

Typical attack path

1. Obtain local access to a system running the vulnerable package
2. Identify an application or process that invokes the affected sorting_key_copy function
3. Supply malicious input that manipulates the Name argument
4. Trigger the out-of-bounds read to achieve memory corruption effects

How to detect it

Examine system and application logs for crashes or memory access violations involving the affected package on local hosts.

What your security team should do

• Apply the fixed package version immediately on all affected Red Hat systems
• Limit local user access to systems using the vulnerable package until patched
• Review local process logs for signs of memory corruption crashes