CVE catalog

CVE-2025-71438

UBUNTU-CVE-2025-71438

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

(An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in ...)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugpacpro0.5.0+svn4288~dfsg1-1ubuntu1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1+esm1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1+esm2vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1build1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1+esm2vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1+esm1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-4ubuntu1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-5vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-5ubuntu0.1~esm2vulnerable
Ubuntugpacpro1.0.1+dfsg1-4vulnerable
Ubuntugpacpro1.0.1+dfsg1-5vulnerable
Ubuntugpacpro2.0.0+dfsg1-2vulnerable
Ubuntugpacpro2.0.0+dfsg1-2ubuntu0.1~esm2vulnerable
Ubuntugpacpro2.2.1+dfsg1-3vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1build1vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1build2vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1ubuntu0.1~esm2vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]