PT-2025-25591 · Spdlog+2 · Spdlog+2
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
spdlog versions up to 1.15.1
Description
A problematic vulnerability was found in the spdlog library, affecting the
scoped padder function in the include/spdlog/pattern formatter-inl.h library. This vulnerability leads to resource consumption and can be exploited locally. The issue has been publicly disclosed.Recommendations
For versions up to 1.15.1, upgrade to version 1.15.2 to address this issue. As a temporary workaround, consider restricting the use of the
scoped padder function until the patch is applied.Exploit
Fix
Improper Resource Release
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Spdlog