CVE-2025-68382

Medium · 6.5

CVSS

6.5

EPSS

0.2%

Published

Dec 18, 2025

CISA due date

—

The record

Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when handling truncated XDR-encoded RPC messages.

Affected packages

Ecosystem	Package	Introduced	Fixed