CVE-2025-32988: Double Free
A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure. This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior.
AI Analysis
Technical Summary
CVE-2025-32988 is a double-free vulnerability in GnuTLS caused by incorrect ownership handling during the export of SAN entries containing an otherName. When the type-id OID is invalid or malformed, GnuTLS calls asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the caller later frees the same structure. This vulnerability can be triggered via public GnuTLS APIs and may result in denial of service or memory corruption depending on allocator behavior. Red Hat has issued security advisories RHSA-2025:16115 and RHSA-2025:16116 providing patches for affected versions in Red Hat Enterprise Linux 10 and 9 respectively.
Potential Impact
The vulnerability may lead to denial of service or memory corruption in applications using vulnerable GnuTLS versions. There is no indication of confidentiality or integrity impact. Exploitation does not require privileges or user interaction but has a high attack complexity due to the need for a malformed type-id OID. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has released security updates that fix this vulnerability in GnuTLS. Users should apply the updated packages as described in Red Hat advisories RHSA-2025:16115 for Red Hat Enterprise Linux 10 and RHSA-2025:16116 for Red Hat Enterprise Linux 9. Details on applying these updates are available at https://access.redhat.com/articles/11258. No additional mitigation steps are required beyond applying the official patches.
CVE-2025-32988: Double Free
Description
A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure. This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior.
CVSS v3.1
Score 6.5medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-32988 is a double-free vulnerability in GnuTLS caused by incorrect ownership handling during the export of SAN entries containing an otherName. When the type-id OID is invalid or malformed, GnuTLS calls asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the caller later frees the same structure. This vulnerability can be triggered via public GnuTLS APIs and may result in denial of service or memory corruption depending on allocator behavior. Red Hat has issued security advisories RHSA-2025:16115 and RHSA-2025:16116 providing patches for affected versions in Red Hat Enterprise Linux 10 and 9 respectively.
Potential Impact
The vulnerability may lead to denial of service or memory corruption in applications using vulnerable GnuTLS versions. There is no indication of confidentiality or integrity impact. Exploitation does not require privileges or user interaction but has a high attack complexity due to the need for a malformed type-id OID. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat has released security updates that fix this vulnerability in GnuTLS. Users should apply the updated packages as described in Red Hat advisories RHSA-2025:16115 for Red Hat Enterprise Linux 10 and RHSA-2025:16116 for Red Hat Enterprise Linux 9. Details on applying these updates are available at https://access.redhat.com/articles/11258. No additional mitigation steps are required beyond applying the official patches.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- redhat
- Date Reserved
- 2025-04-15T01:31:12.104Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2025:16115","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:16116","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17181","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17348","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17361","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:17415","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:19088","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2025:22529","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7477","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2025-32988","vendor":"Red Hat"}]
Threat ID: 686f76caa83201eaaca669ce
Added to database: 07/10/2025, 08:16:10 UTC
Last enriched: 07/15/2026, 11:17:21 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 433
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.