CVE-2025-9820
Medium · 4.0CVSS
4.0
EPSS
0.2%
Published
Jan 26, 2026
CISA due date
—
The record
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | gnutls | 0 | 3.8.4-1.3.mga9 |
| SUSE:Linux Enterprise Micro 5.2 | gnutls | 0 | 3.6.7-150200.14.40.1 |
| SUSE:Linux Enterprise Micro 5.3 | gnutls | 0 | 3.7.3-150400.19.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | gnutls | 0 | 3.8.3-150600.4.12.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | gnutls | 0 | 3.8.3-150600.4.12.1 |
| openSUSE:Leap 15.6 | gnutls | 0 | 3.8.3-150600.4.12.1 |
| openSUSE:Leap 16.0 | gnutls | 0 | 3.8.10-160000.2.1 |
| openSUSE:Tumbleweed | gnutls | 0 | 3.8.11-1.1 |
Related vulnerabilities
- CVE-2025-14831 A flaw was found in GnuTLS. Also affects gnutls
- CVE-2024-28834 A flaw was found in GnuTLS. Also affects gnutls
- CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when… Also affects gnutls
- CVE-2024-0553 A vulnerability was found in GnuTLS. Also affects gnutls
- CVE-2023-5981 A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK… Also affects gnutls
- CVE-2026-42014 A flaw was found in GnuTLS. Also affects gnutls
- CVE-2026-5419 A flaw was found in gnutls. Also affects gnutls
- CVE-2026-5260 A flaw was found in libgnutls. Also affects gnutls