Vulnerability in GNU sort leading to buffer overflow
A vulnerability (CVE-2025-5278) has been identified in the sort utility included with the GNU Coreutils package, which leads to out-of-bounds data access when sorting using the syntax ‘+POS1[.C1][OPTS]’ used for selecting sort keys from processed data. This problem is caused by an integer wraparound in the begfield() function, allowing the reading of one byte of data outside of the buffer. The vulnerability can be exploited to call […]
