CNNVD-202512-4092 Information
Dec 23, 2025
cve
CNNVD ID
CNNVD-202512-4092
Related CVE
- CNNVD Published: 2025-12-23
Description (Chinese)
NSF Unidata NetCDF-C是美国NSF Unidata公司的一个处理NetCDF文件的工具。 NSF Unidata NetCDF-C存在安全漏洞，该漏洞源于解析属性名称时缺乏对用户提供数据长度的验证，可能导致栈缓冲区溢出和远程代码执行。
Description (English)
NSF Unidata NetCDF-C is a tool for the processing of NetCDF documents by the United States company NSF Unidata. There is a security loophole in the NSF Unidata NetCDF-C, which stems from the lack of verification of the data length provided by users when deciphering the attribute name, which could lead to spills over the fence and remote code execution.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
NSF Unidata
Published
2025-12-23
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-25-1155/
Share on: