CVE-2025-5702 – IBM Power10 GNU C Library Uninitialized Register Use

The following table lists the changes that have been made to the
CVE-2025-5702 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 3ff69d7a-14f2-4f67-a097-88dee7810d18

    Jun. 05, 2025

    Action Type Old Value New Value
    Added Description The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program.
    Added Reference https://sourceware.org/bugzilla/show_bug.cgi?id=33056
Share the Post:

Related Posts