A vulnerability in GNU sort that leads to a buffer overflow.
A vulnerability has been identified in the sort utility included in the GNU Coreutils package (CVE-2025-5278), which causes access to data outside the buffer boundaries when sorting using the '+POS1[.C1][OPTS]' syntax, used for highlighting sorting keys in processed data. The issue is caused by an integer overflow in the begfield() function, allowing the reading of one byte of data outside the buffer. This vulnerability can be exploited to invoke […]
