PT-2025-11483 · Expr+2 · Expr+2
Published
2025-03-17
·
Updated
2026-05-14
·
CVE-2025-29786
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Expr versions prior to 1.17.0
Description
The issue arises when the Expr expression parser is given an unbounded input string, causing it to attempt to compile the entire string and generate an Abstract Syntax Tree (AST) node for each part of the expression. This can lead to excessive memory usage and an Out-Of-Memory (OOM) crash of the process. The problem is relatively uncommon and only occurs when there are no restrictions on the input size. The estimated number of potentially affected devices is not provided.
Recommendations
For Expr versions prior to 1.17.0, upgrade to Expr version 1.17.0 or later, as this release includes new node budget and memory limit safeguards.
For users who cannot immediately upgrade, impose an input size restriction before parsing by validating or limiting the length of expression strings that your application will accept, and reject or truncate inputs that exceed this limit.
Exploit
Fix
RCE
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Expr
Red Hat