PT-2025-45966 · Julia · Gettext Jll

Published 2025-10-21 · Updated 2025-10-21

OSV

An issue was discovered in GNU gettext 0.19.8. There is a double free in default add message in read-catalog.c, related to an invalid free in po gram parse in po-gram-gen.y, as demonstrated by lt-msgfmt.

Exploit

Related Identifiers

JLSEC-2025-174

Affected Products

Gettext Jll

References · 9

• 🔥 https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/doublefree · Exploit
• 🔥 https://github.com/CCCCCrash/POCs/tree/master/Bin/Tools-gettext-0.19.8.1/heapcorruption · Exploit
• https://osv.dev/vulnerability/JLSEC-2025-174 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00065.html · Note
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00025.html · Note
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00061.html · Note
• https://access.redhat.com/errata/RHSA-2019:3643 · Note
• https://usn.ubuntu.com/3815-2 · Note
• https://usn.ubuntu.com/3815-1 · Note