Threat database

A stack buffer overflow vulnerability (CVE-2025-30472) exists in the corosync package used by Red Hat Enterprise Linux cluster software. The flaw is located in the 'orf_token_endian_convert' function. Red Hat has released security updates addressing this issue for Red Hat Enterprise Linux versions 9 and 10, including various variants such as AppStream, CodeReady Linux Builder, and High Availability. The vulnerability is rated as moderate severity by Red Hat Product Security. No known exploits are reported in the wild at this time.