PT-2025-28827 · 9Fans · Plan9Port

Yifan Zhang · Published 2025-07-09 · Updated 2026-02-02 · CVE-2025-7208

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: plan9port versions prior to 9da5b44

Description: A critical vulnerability exists in the edump function within the /src/plan9port/src/libsec/port/x509.c library. Manipulation of this function leads to a heap-based buffer overflow. The exploit for this issue has been publicly disclosed and may be actively exploited. This product utilizes a rolling release model, therefore specific version details for affected and updated releases are unavailable.

Recommendations: Apply the patch with identifier b3e06559475b0130a7a2fb56ac4d131d13d2012f to address this issue.

Exploit

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

CVE-2025-7208

Affected Products

Plan9Port

References · 14

• 🔥❌ https://github.com/user-attachments/files/19698345/plan9port_crash_1.txt · Exploit, Deleted
• https://github.com/9fans/plan9port/issues/710#issuecomment-2819906648 · Patch
• https://osv.dev/vulnerability/CVE-2025-7208 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7208 · Security Note
• https://git.9front.org/plan9front/plan9front/b3e06559475b0130a7a2fb56ac4d131d13d2012f/commit.html · Patch
• https://t.me/cveNotify/150581 · Telegram Post
• https://drive.google.com/drive/folders/1kedwNLNDiFQB2OAp7S-ZKYoF7nxfIZGO?usp=sharing · Note
• https://vuldb.com/?submit.607684 · Note
• https://vuldb.com/?submit.304567 · Note
• https://vuldb.com/?id.259053 · Note
• https://twitter.com/VulmonFeeds/status/1942829201851117596 · Twitter Post
• https://vuldb.com/?ctiid.259053 · Note
• https://twitter.com/CVEnew/status/1942924484773917132 · Twitter Post
• https://t.me/cvenotify/128125 · Telegram Post