Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-71436— Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag

Quick assessment

Affected
librdf Raptor RDF Syntax Library
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Raptor RDF 语法库（版本 2.0.15 至 2.0.16）中的 函数存在一个基于堆的缓冲区溢出漏洞。该漏洞源于将语言标签长度截断为无符号字符（unsigned char）。攻击者可构造包含长度达 256 字节或更长的语言标签的 Turtle、TriG、N-Triples 或 N-Quads 文档，从而破坏堆内存，导致应用程序崩溃，甚至可能实现代码执行。

CVSS 7.1 · High

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-71436

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag
Source: CVE Program / CVE List V5
Vulnerability Description
Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
librdf Raptor RDF Syntax Library 2.0.15 ~ 2.0.16 -

II. Public POCs for CVE-2025-71436

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-71436

请登录查看更多情报信息。

Other References for CVE-2025-71436 (5)

IV. Related Vulnerabilities

Same product: Raptor RDF Syntax Library
Same vendor: librdf
Same weakness: CWE-122

V. Comments for CVE-2025-71436

No comments yet

Leave a comment