CVE-2025-13654
CVE-2025-13654

Currently unrated

Key Information:

Vendor

Duc

Status
Duc
Vendor
CVE Published:
5 December 2025

What is CVE-2025-13654?

A stack buffer overflow vulnerability exists in the buffer_get function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read.

Affected Version(s)

Duc 0 < 1.4.6

References

https://github.com/zevv/duc/releases/tag/1.4.6
https://kb.cert.org/vuls/id/441887
https://hackingbydoing.wixsite.com/hackingbydoing/post/st...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-13654 : Stack Buffer Overflow in Duc Disk Management Tool by Zevv