CVE-2023-25139

sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to write a padded, thousands-separated string representation of a number, if the buffer is allocated the exact size required to represent that number as a string. For example, 1,234,567 (with padding to 13) overflows by two bytes.

• CWE-787
• CWE-787

• http://www.openwall.com/lists/oss-security/2023/02/10/1
• https://security.netapp.com/advisory/ntap-20230302-0010/
• https://sourceware.org/bugzilla/show_bug.cgi?id=30068Exploit, Issue Tracking, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/02/10/1
• https://security.netapp.com/advisory/ntap-20230302-0010/
• https://sourceware.org/bugzilla/show_bug.cgi?id=30068Exploit, Issue Tracking, Third Party Advisory

Published

Feb 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25131Use of default password vulnerability in PowerPanel Business…9.8
• CVE-2023-25132Unrestricted upload of file with dangerous type vulnerabilit…9.8
• CVE-2023-25133Improper privilege management vulnerability in default.cmd f…9.8
• CVE-2023-25134McAfee Total Protection prior to 16.0.50 may allow an advers…6.7
• CVE-2023-25135vBulletin before 5.6.9 PL1 allows an unauthenticated remote …9.8
• CVE-2023-25136OpenSSH server (sshd) 9.1 introduced a double-free vulnerabi…6.5
• CVE-2023-2514Mattermost Sever fails to redact the DB username and passwor…7.5
• CVE-2023-25140A vulnerability has been identified in Parasolid V34.0 (All …7.8
• CVE-2023-25141Apache Sling JCR Base < 3.1.12 has a critical injection vuln…7.5
• CVE-2023-25143An uncontrolled search path element vulnerability in the Tre…9.8
• CVE-2023-25144An improper access control vulnerability in the Trend Micro …7.8
• CVE-2023-25145A link following vulnerability in the scanning function of T…7.8