CVE-2025-6966

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Dec 5, 2025

CISA due date

—

The record

NULL pointer dereference in TagSection.keys() in python-apt on APT-based Linux systems allows a local attacker to cause a denial of service (process crash) via a crafted deb822 file with a malformed non-UTF-8 key.

Affected packages

Ecosystem	Package	Introduced	Fixed