What’s Vulnerable › Vulnerabilities

CVE-2025-57275

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-01 · updated 2026-06-17
• Weakness: CWE-120

Description

Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf.

References

• https://github.com/spdk/spdk/commit/f786c6d75f5c5162363a621b24f5449c729679c9
• https://spdk.io/

Get alerted when CVE-2025-57275 or the next vulnerability affects your stack