Heap Buffer Overflow Vulnerability in GnuTLS Certtool Utility

CVE-2025-32990

What is CVE-2025-32990?

A heap buffer overflow vulnerability exists in the certtool utility of GnuTLS, specifically within its template parsing logic. By processing certain settings from a template file, an attacker may exploit this flaw to initiate an out-of-bounds NULL pointer write, leading to potential memory corruption. This exploitation can result in a denial-of-service scenario, causing the affected system to crash unexpectedly.

References