Buffer Overwrite Vulnerability in GNU C Library for Power10 Processors

CVE-2025-5702

What is CVE-2025-5702?

A vulnerability exists in the GNU C Library's strcmp implementation, optimized for Power10 processors. The implementation improperly handles vector registers v20 to v31 without saving the contents of these non-volatile registers as defined by the powerpc64le ABI. This oversight leads to potential overwriting of register contents, which may alter the control flow of the calling function or inadvertently leak input strings to other areas of the program.

References