PT-2025-45966 · Julia · Gettext Jll

Publicado 2025-10-21 · Atualizado 2025-10-21

OSV

An issue was discovered in GNU gettext 0.19.8. There is a double free in default add message in read-catalog.c, related to an invalid free in po gram parse in po-gram-gen.y, as demonstrated by lt-msgfmt.

Exploit

Identificadores relacionados

JLSEC-2025-174

Produtos afetados

Gettext Jll

Referências · 9

• 🔥 https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/doublefree · Exploit
• 🔥 https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/heapcorruption · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00065.html · Nota
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00025.html · Nota
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00061.html · Nota
• https://osv.dev/vulnerability/JLSEC-2025-174 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2019:3643 · Nota
• https://usn.ubuntu.com/3815-2 · Nota
• https://usn.ubuntu.com/3815-1 · Nota