https://seclists.org/oss-sec/2025/q4/203: gnutls 3.8.11 leased with fix for CVE-2025-9820
Published Nov 20, 2025
·Updated
Affected Software
1 affected component
GNUTLS GNUTLS>=3.8.11
Frequently Asked Questions
1
What is the severity of CVE-2025-9820?
CVE-2025-9820 is categorized as a medium severity vulnerability due to its potential impact on applications that utilize the affected GnuTLS library.
2
How do I fix CVE-2025-9820?
To fix CVE-2025-9820, upgrade your GnuTLS version to 3.8.12 or later, where the vulnerability has been addressed.
3
What type of vulnerability is CVE-2025-9820?
CVE-2025-9820 is a stack buffer overflow vulnerability that occurs when a token label exceeding 32 characters is passed to the gnutls_pkcs11_token_init function.
4
What impact does CVE-2025-9820 have on GnuTLS applications?
Applications using GnuTLS may experience crashes or unexpected behavior due to memory corruption caused by this vulnerability.
5
When was CVE-2025-9820 published?
CVE-2025-9820 was published on November 20, 2025, alongside a security advisory detailing the fix.