5.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-0838

CVE-2025-0838: There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(),...

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-0838

CVE-2025-0838:

5.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, as described, affects the sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map}. These public-facing methods utilize the absl::container_internal::raw_hash_set class for their underlying implementation. The provided commit patch (5a0e2cb5e3958dd90bb8569a2766622cb74d90c1) directly modifies raw_hash_set.h and raw_hash_set.cc to introduce upper-bound checks on size arguments.

The vulnerability existed because these internal methods (raw_hash_set constructor, rehash, and reserve) did not properly validate their size parameters. When called with excessively large values (originating from the public API), these methods would proceed to calculate memory requirements (e.g., via NormalizeCapacity, GrowthToLowerboundCapacity, and ultimately RawHashSetLayout::alloc_size within the resize operation). This calculation could lead to an integer overflow, resulting in a much smaller memory buffer being allocated than intended. Subsequent operations on the container would then cause out-of-bounds memory writes.

The identified vulnerable functions are the specific methods within absl::container_internal::raw_hash_set where these crucial checks were missing and subsequently added by the patch. These are the functions that directly contained the flawed logic leading to the integer overflow and heap buffer overflow. During exploitation, these functions (or functions they call like resize) would be on the stack trace at the point where the overflow or miscalculation occurs.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.