PT-2025-48046 · Crates.Io · Nftnl
Published
2025-10-18
·
Updated
2025-10-18
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::with page size constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch initialization.
The flaw was fixed in commit 94a286f by adding an overflow check:
Rust
batch page size
.checked add(crate::nft nlmsg maxsize())
.expect("batch page size is too large and would overflow");Mitigation
Upgrade to version
0.9.0 or later, which aborts instead. Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Nftnl