CVE-2025-5278

Microsoft · Published July 25, 2026

4.4

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Coreutils: heap buffer under-read in gnu coreutils sort via key specification. Coreutils: heap buffer under-read in gnu coreutils sort via key specification

Affected Products

azl3 coreutils 9.4-6 on Azure Linux 3.0
azl3 coreutils 9.4-7 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L